AIRAF
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The AIRAF is an examination in applied risk analysis and finance, structured around a six-domain body of knowledge that runs from governance and framework design through identification, quantification, mitigation, monitoring and reporting, and finally regulatory and ethical standards. It is aimed at practitioners whose work touches risk in a financial or enterprise setting: risk analysts, compliance and control staff, internal audit professionals, treasury and operations specialists, and early-career quantitative staff who need a structured, defensible way to reason about exposure. The exam rewards judgement as much as recall. Candidates should expect multiple-choice items that describe a realistic situation and ask for the most appropriate action, the correct classification of a risk, or the interpretation of a measurement result, rather than items that simply ask for a definition. Preparation works best in two passes. First, build a map of the six domains and make sure you can explain how they connect, because questions often straddle boundaries, for example how a control weakness in mitigation shows up in monitoring output. Second, drill the quantitative material until the arithmetic is automatic, then practise justifying a choice in one sentence. Confirm exam logistics, current fees and scheduling directly with the awarding body, which publishes the authoritative details.
What you'll study
About AIRAF preparation
What format is the exam?
It is a multiple-choice examination delivered in a single sitting. Items are scenario-based rather than definitional, so many questions present a short situation and ask for the best response. Check the awarding body's website for the current number of items, delivery method and any permitted reference materials before you book.
How difficult is it in practice?
Most candidates find the governance and compliance domains approachable and the measurement domain the hardest, because it demands both formula recall and interpretation. The real difficulty is discrimination between plausible options: several answers will be defensible in general but wrong for the specific scenario described, so read the stem carefully.
Can I retake it, and how soon?
Retake rules, waiting periods and any limit on attempts are set by the awarding body and change from time to time. Rather than rely on secondhand reports, check the official candidate handbook or contact the body directly. Build your study plan assuming a single attempt, so a retake is a safety net rather than part of the plan.
How much time should I allow for preparation?
A practical approach is to allocate study time in proportion to the domain weights, so governance and identification together receive the largest share. Most working candidates spread preparation over several weeks of short, regular sessions rather than a final cram, and reserve the last stretch for timed practice and reviewing errors.
In what order should I study the domains?
Start with the framework and governance domain to establish vocabulary, then identification and assessment, then measurement. Study mitigation and monitoring together, since controls and reporting are two sides of the same loop. Finish with regulatory and ethical standards, which are easier to retain once you understand the risk concepts they constrain.
How should I handle the quantitative questions?
Learn each formula together with the decision it supports, not in isolation. Practise explaining in one line what a result means and what you would do differently if it were higher or lower. On the exam, estimate the answer before computing, so an arithmetic slip becomes obvious rather than silently accepted.
What are the most common failure modes?
Three recur. First, choosing the most comprehensive-sounding answer rather than the one that fits the scenario. Second, confusing inherent and residual risk, or detection controls with preventive ones. Third, running out of time on calculation items. Practise under timed conditions and learn to flag and move on.
What does the exam cost, and how long does it take?
Fees, appointment length and scheduling windows are published by the awarding body and are revised periodically, so reliable figures belong on its official site rather than in a study guide. Confirm the current fee, cancellation terms and identification requirements there before you schedule your appointment.
Does passing the exam make me a certified professional?
The exam is one component of a wider credential, which may also require experience, an application or ongoing continuing education. Review the full eligibility and maintenance requirements on the awarding body's site. This page is independent study material and is not affiliated with or endorsed by the certifying organisation.