RMIA CPRM study guide
RMIA CPRM · Work through your exam, one topic at a time.
The Certified Practising Risk Manager (CPRM) is one of the professional certification programs offered by the Risk Management Institute of Australasia (RMIA), listed on the RMIA site alongside the CPRA and CCRO credentials. RMIA describes itself as the largest professional association for risk professionals across Australia, New Zealand and the Asia Pacific, and positions its certifications as industry-recognised credentials that validate expertise and signal a commitment to excellence in risk management. The CPRM is therefore aimed at practising risk managers who want independent recognition of their experience, rather than at newcomers seeking a first qualification. Member testimonials on the RMIA site come from group risk managers, a group risk and compliance manager and a fire service commander holding the MRMIA CPRM designation, which suggests the credential is typically pursued by mid-to-senior practitioners. Topics on this exam: Risk Management (CPRM certification body of knowledge; official domain breakdown not published in source) and Risk Management Practice and Professional Application (CPRM certification body of knowledge; official domain breakdown not published in source). The RMIA CPRM study guide has 2 sections and about 690 words.
01Risk Management: Core Concepts, Frameworks, and Terminology
Risk management is the coordinated set of activities that directs and controls an organization with regard to risk. At its core sits the distinction between risk (the effect of uncertainty on objectives, expressed as a combination of likelihood and consequence) and issue (an uncertainty that has already materialized). Candidates must be fluent in the vocabulary chain: hazard, threat, vulnerability, exposure, likelihood, impact, inherent risk, residual risk, risk appetite, risk tolerance, and risk capacity. Appetite is the amount of risk an organization is willing to pursue to meet objectives; tolerance is the acceptable variation around that appetite; capacity is the maximum risk it can bear before failure.
345 words, about 2 min02Risk Management Practice and Professional Application
Practitioners embed risk management into governance, strategy, projects, and operations. Expect questions on risk culture, the three lines model, board oversight, and the role of the chief risk officer. Understand risk appetite statements and how they cascade into delegated limits, thresholds, and escalation triggers. Know how risk registers are maintained, how KRIs are designed with thresholds (green/amber/red), and how risk reporting supports decision-making rather than mere compliance.
345 words, about 2 min