CRMI study plan

Define the core risk management vocabulary (risk, hazard, uncertainty, exposure, inherent vs. residual risk) in your own words

Diagram the risk management process cycle and label where each CRMI domain fits

Compare at least three risk management frameworks (e.g., ISO 31000-style principles, COSO ERM components, a generic three-lines model) on scope, structure, and intended users

List the principal risk categories (strategic, operational, financial, compliance, reputational) and give one original example of each from a hypothetical organization

Apply multiple identification techniques (brainstorming, interviews, process walkthroughs, checklists, scenario analysis) to a single invented business process

Construct a risk register with columns for cause, event, consequence, owner, and current controls

Distinguish root causes from symptoms when writing risk statements

Rank identified risks by preliminary likelihood and impact to shortlist the top ten

Build a 5x5 likelihood-impact heat map and plot your shortlisted risks on it

Explain the difference between qualitative, semi-quantitative, and quantitative assessment and state when each is appropriate

Compute expected loss, exposure, and simple value-at-risk style figures for two sample risks using provided assumptions

Identify data quality limitations that would undermine a quantitative estimate

Describe how sensitivity, scenario, and stress testing differ and when each adds value

Interpret a risk metric (e.g., a loss frequency/severity distribution summary) and explain what it does and does not tell you

Distinguish correlation, causation, and dependency when aggregating risks across a portfolio

Critique one quantitative estimate for bias, overconfidence, and model risk

Map the treatment options (avoid, reduce, transfer, accept, and share) to your top risks and justify each choice

Design at least two specific controls and classify each as preventive, detective, or corrective

Evaluate control cost against expected risk reduction for one high-priority risk

Draft residual risk positions after treatment and confirm they sit within stated tolerance

Define risk appetite and risk tolerance and write three original appetite statements with measurable thresholds

Explain how governance structures (board oversight, risk committee, three lines of defense) assign accountability

Describe how culture, tone at the top, and incentives shape risk-taking behavior

Identify at least three warning signs of a weak risk culture and propose a response to each

Select key risk indicators for your top five risks and define thresholds and escalation triggers

Design a one-page risk dashboard and a reporting cadence for board, management, and operational audiences

Summarize the main regulatory and compliance obligations relevant to risk reporting and record-keeping at a general level

Apply an ethical decision framework to two risk scenarios involving conflicts of interest and disclosure

Synthesize all domains into an integrated end-to-end risk management case study for one fictional organization

Re-test weak areas identified in earlier weeks and close knowledge gaps

Practice timed mixed-domain questions and review every miss for the underlying concept

Produce a personal one-page summary sheet of key definitions, formulas, and frameworks