We use KRIs to provide early warning signs that risk levels are rising, allowing the organization to take proactive measures to mitigate or manage the risk.
In the Software Development scenario this would be e.g. Percentage of Projects Delivered Late.
When KRIs exceed the threshold, stakeholders should be informed. The information should result in either investigation of the cause or directly into mitigation.