AIRAF study guide
AIRAF · Work through your exam, one topic at a time.
The AIRAF is an examination in applied risk analysis and finance, structured around a six-domain body of knowledge that runs from governance and framework design through identification, quantification, mitigation, monitoring and reporting, and finally regulatory and ethical standards. It is aimed at practitioners whose work touches risk in a financial or enterprise setting: risk analysts, compliance and control staff, internal audit professionals, treasury and operations specialists, and early-career quantitative staff who need a structured, defensible way to reason about exposure. The AIRAF study guide has 6 sections and about 1,986 words.
01Risk Management Framework and Governance
A risk management framework is the documented structure of roles, policies, processes, and limits through which an organization identifies, measures, controls, monitors, and reports risk. Candidates should be able to distinguish the three lines model: the first line (business units) owns risk and takes it; the second line (risk, compliance) sets frameworks, challenges, and aggregates; the third line (internal audit) provides independent assurance.
374 words, about 2 min02Risk Identification and Assessment
Risk identification is the systematic process of surfacing exposures before they crystallize. Candidates should know the main techniques: process mapping and risk-and-control self-assessments (RCSA), scenario analysis and workshops, loss-event data and near-miss review, external event databases, horizon scanning, and key risk indicators (KRIs) as early warnings.
328 words, about 2 min03Risk Measurement and Quantification
Quantification converts exposures into comparable numbers. Candidates must understand value at risk (VaR) and its limitations: VaR states a loss threshold not exceeded with a given confidence over a horizon, but says nothing about the size of losses beyond it.
330 words, about 2 min04Risk Mitigation and Controls
Mitigation reduces risk through controls, transfers, or structural changes. Know the categories: preventive controls (stop an event before it occurs, such as access restrictions), detective controls (identify after the fact, such as reconciliation and monitoring), and corrective controls (remediate).
329 words, about 2 min05Risk Monitoring and Reporting
Monitoring provides ongoing assurance that risk remains within appetite. Know the tools: KRIs and key control indicators, limit monitoring and exception reports, dashboards, trend analysis, loss-event tracking, and periodic independent review.
312 words, about 2 min06Regulatory Compliance and Ethical Standards
Compliance ensures adherence to laws, regulations, and internal standards. Know the components: regulatory mapping, policies and procedures, training, monitoring and testing, issue management, and regulatory change management.
313 words, about 2 min