Associate PRM study materials
Associate PRM study resources

Associate PRM key terms

Associate PRM · Get comfortable with the vocabulary.

Enterprise Risk Management (ERM)

A firm-wide framework that identifies, assesses, and manages all material risks across business units, treating risk as a portfolio rather than a set of isolated silos.

Related: Risk Appetite, Risk Culture, Three Lines of Defense
Risk Appetite

The amount and type of risk an organization is willing to accept in pursuit of its strategic objectives, expressed in qualitative statements and quantitative limits.

Related: Risk Tolerance, Risk Capacity, Risk Appetite Statement
Risk Tolerance

The acceptable degree of variation from a stated risk appetite for a specific risk category, often expressed as a numerical threshold or limit.

Related: Risk Appetite, Risk Limit
Risk Capacity

The maximum risk an organization can absorb before its financial, operational, or reputational viability is threatened, independent of what it chooses to accept.

Related: Risk Appetite, Risk Tolerance
Risk Appetite Statement

A formal document articulating the firm's appetite for risk by category, with measurable boundaries, escalation triggers, and clear ownership assigned to accountable executives.

Related: Risk Appetite, Risk Limit
Three Lines of Defense

A governance model in which business units own and manage risk, an independent risk function oversees it, and internal audit provides assurance to the board.

Related: Enterprise Risk Management (ERM), Risk Culture, Internal Audit
Risk Culture

The shared values, attitudes, and behaviors within an organization that determine how people identify, discuss, and act on risk in daily decisions.

Related: Tone at the Top, Three Lines of Defense
Tone at the Top

The signals senior leadership sends through words and actions about the importance of ethics, controls, and prudent risk-taking throughout the organization.

Related: Risk Culture, Code of Ethics
Risk Governance

The structures, roles, policies, and reporting lines that allocate authority and accountability for risk decisions, typically spanning the board, committees, and executive management.

Related: Three Lines of Defense, Risk Committee
Risk Committee

A board or management committee responsible for overseeing the risk profile, approving risk appetite, and challenging risk-taking and mitigation decisions.

Related: Risk Governance, Risk Appetite
Risk Register

A structured log recording identified risks, their causes, likelihood, impact, owners, controls, and status, used to track and prioritize risk treatment.

Related: Risk Assessment, Risk Heat Map
Risk Assessment

The process of evaluating the likelihood and impact of identified risks, considering existing controls, to determine their significance and priority for action.

Related: Risk Register, Inherent Risk, Residual Risk
Inherent Risk

The level of risk that exists before any controls or mitigation measures are applied, reflecting the raw exposure of an activity or process.

Related: Residual Risk, Risk Assessment
Residual Risk

The risk remaining after existing controls and mitigation measures have been applied, which must be compared against tolerance to decide whether further action is needed.

Related: Inherent Risk, Risk Control
Risk Heat Map

A visual grid plotting risks by likelihood and impact, often color-coded, to help management prioritize exposures and communicate the risk profile.

Related: Risk Register, Risk Assessment
Key Risk Indicator (KRI)

A metric tracked over time that provides early warning of rising risk exposure, with defined thresholds that trigger escalation or corrective action.

Related: Risk Assessment, Risk Reporting
Risk Control Self-Assessment (RCSA)

A structured exercise in which business units evaluate their own processes, identify risks, and judge whether existing controls are adequate and effective.

Related: Risk Control, Risk Register
Credit Risk

The potential loss arising when a borrower or counterparty fails to meet contractual obligations, such as repaying principal and interest on time.

Related: Probability of Default, Exposure at Default, Loss Given Default
Probability of Default (PD)

The estimated likelihood that an obligor will fail to meet its obligations within a defined horizon, usually one year, expressed as a percentage.

Related: Credit Risk, Loss Given Default, Credit Rating
Exposure at Default (EAD)

The estimated outstanding amount owed by a borrower at the moment of default, including drawn balances and expected drawdowns on committed facilities.

Related: Probability of Default, Credit Risk
Loss Given Default (LGD)

The share of exposure expected to be lost if a default occurs, after accounting for recoveries from collateral, guarantees, and workout proceeds.

Related: Probability of Default, Exposure at Default, Collateral
Credit Rating

An assessment of an obligor's or instrument's creditworthiness, produced internally or by an external agency, often mapped to a defined scale of default likelihood.

Related: Probability of Default, Credit Risk
Collateral

Assets pledged by a borrower to secure a loan, which the lender may seize and sell to recover losses if the borrower defaults.

Related: Loss Given Default, Credit Risk Mitigation
Concentration Risk

The danger of excessive exposure to a single counterparty, sector, product, or region, so that one adverse event can cause disproportionately large losses.

Related: Credit Risk, Risk Diversification
Market Risk

The potential loss from movements in market prices, including interest rates, foreign exchange rates, equity prices, and commodity prices affecting positions.

Related: Value at Risk, Interest Rate Risk, Stress Testing
Value at Risk (VaR)

A statistical estimate of the maximum loss a portfolio could suffer over a given horizon at a specified confidence level under normal market conditions.

Related: Expected Shortfall, Market Risk, Backtesting
Expected Shortfall

The average loss expected in the worst tail of outcomes beyond the VaR threshold, giving a more complete view of extreme downside risk.

Related: Value at Risk, Stress Testing
Stress Testing

A technique that applies severe but plausible scenarios to a portfolio or institution to estimate losses and capital needs under adverse conditions.

Related: Scenario Analysis, Value at Risk, Expected Shortfall
Backtesting

Comparing model-generated risk estimates, such as VaR, with actual realized outcomes to test whether the model's assumptions and calibration remain reliable.

Related: Value at Risk, Model Risk
Interest Rate Risk

The exposure of earnings or economic value to changes in interest rates, including repricing mismatches, yield curve shifts, and basis risk.

Related: Market Risk, Duration
Duration

A measure of a fixed-income instrument's price sensitivity to interest rate changes, approximating the percentage price change for a one percent rate shift.

Related: Interest Rate Risk, Market Risk
Liquidity Risk

The risk that a firm cannot meet cash or collateral obligations as they fall due, or cannot unwind positions quickly without significant price concessions.

Related: Market Risk, Funding Liquidity Risk
Operational Risk

The risk of loss from inadequate or failed internal processes, people, systems, or external events, including fraud, errors, and legal and compliance failures.

Related: Risk Control, Business Continuity Planning, Model Risk
Model Risk

The potential for adverse consequences from decisions based on incorrect or misused model outputs, arising from flawed assumptions, data, or implementation.

Related: Backtesting, Operational Risk
Business Continuity Planning

Preparedness arrangements, including backup systems and recovery procedures, that enable critical operations to continue or resume after a disruptive event.

Related: Operational Risk, Risk Mitigation
Risk Control

A policy, procedure, or mechanism designed to prevent, detect, or reduce the impact of a risk, such as segregation of duties or approval limits.

Related: Residual Risk, Risk Mitigation, Internal Audit
Risk Mitigation

Actions taken to reduce the likelihood or impact of a risk, including transferring it through insurance or hedging, avoiding it, or accepting it deliberately.

Related: Risk Control, Credit Risk Mitigation, Hedging
Hedging

Taking an offsetting position or instrument, such as a derivative, intended to reduce exposure to an adverse price, rate, or credit movement.

Related: Risk Mitigation, Market Risk
Risk Reporting

The regular communication of risk exposures, limit utilization, incidents, and emerging issues to management and the board in a clear, decision-useful format.

Related: Key Risk Indicator (KRI), Risk Limit
Risk Limit

A quantitative boundary on risk-taking, such as a maximum exposure or stop-loss level, whose breach requires escalation and corrective action.

Related: Risk Tolerance, Risk Reporting
Code of Ethics

A formal statement of the professional standards and behaviors expected of employees, covering integrity, objectivity, confidentiality, competence, and conflicts of interest.

Related: Conflicts of Interest, Tone at the Top, Fiduciary Duty
Conflicts of Interest

Situations where personal, financial, or organizational interests could improperly influence professional judgment, requiring disclosure, avoidance, or managed separation.

Related: Code of Ethics, Fiduciary Duty
Fiduciary Duty

The legal and ethical obligation to act in the best interests of clients or beneficiaries, placing their interests ahead of one's own.

Related: Code of Ethics, Conflicts of Interest