A monitoring measure counts controls deployed. Why might it be insufficient as a KRI?

1. A KRI must always be a financial amount
2. It measures activity without necessarily indicating exposure or effectiveness
3. Deployment data can never support management
4. Every count-based measure is inherently invalid