CRM55 study materials
CRM55 study resources

CRM55 study plan

CRM55 · Give each week a clear focus.

8 weeks · About 6 hours per week

Week 1

Risk Management Fundamentals and Governance

  • Define risk, uncertainty, hazard, exposure, and loss in your own words and attach one concrete workplace example to each term.

  • Diagram the full risk management process from objective setting through monitoring, labeling the input and output of every stage.

  • Build a role-accountability table covering board, risk committee, CRO, business unit owners, and internal audit, writing one accountability sentence per role.

  • Summarize the core governance expectations common to major risk frameworks and note two points where they diverge.

  • Write five original exam-style questions on governance structure and answer them without notes.

Your checkpoint

A two-page governance map containing the process diagram and the role-accountability table, self-scored against a 10-point checklist you write yourself.

Week 2

Risk Identification and Exposure Analysis

  • Populate a risk register with at least 15 distinct risks spread across at least four risk categories.

  • Apply three different identification techniques (structured brainstorming, checklist review, and process walk-through) and record which technique surfaced which risk.

  • Score every register entry for likelihood and severity on a 5x5 scale and convert each score into an annualized expected loss figure.

  • Rank the register by expected loss and identify the Pareto group that drives roughly 80 percent of total exposure.

  • Stress-test three high-ranked risks by doubling severity and note which ones move into a different treatment tier.

Your checkpoint

A 15-row risk register spreadsheet with likelihood, severity, expected loss, rank, and a Pareto view of the top risks.

Week 3

Risk Control and Loss Prevention & Risk Identification and Exposure Analysis

  • Classify every existing control for your top ten risks as preventive, detective, or corrective, and flag any risk with only one control type.

  • Apply a hierarchy-of-controls ranking to propose a stronger substitute for your three weakest controls.

  • Recompute residual likelihood and severity for the top ten risks after controls and state the assumption behind each adjustment.

  • Identify five control gaps and draft one specific remediation action, owner, and target date for each.

  • Estimate the annual cost and expected loss reduction for two proposed controls and state whether each clears a break-even test.

Your checkpoint

A control matrix covering the top ten risks with inherent versus residual ratings plus a cost-benefit note for two proposed controls.

Week 4

Risk Financing and Insurance

  • Compare retention, transfer, and hybrid financing options and state the decision criteria that favor each.

  • Calculate retained loss for three scenarios that vary deductible, limit, and coinsurance, showing your arithmetic line by line.

  • Break a specimen policy into declarations, insuring agreement, exclusions, and conditions, and explain what each section controls.

  • Compute total cost of risk for a sample program by summing premiums, retained losses, administrative cost, and uninsured losses.

  • Recommend a retention level for that program and defend it against a stated loss tolerance.

Your checkpoint

A total cost of risk worksheet covering three scenarios plus a one-page recommendation memo that justifies the chosen retention level.

Week 5

Enterprise and Operational Risk Management

  • Contrast enterprise-wide risk management with siloed risk management using two practical decision examples.

  • Draft a risk appetite statement that includes three quantified tolerance metrics and one escalation trigger for each.

  • Map an operational risk taxonomy across people, process, systems, and external events, and place ten real risks into it.

  • Run a risk and control self-assessment on one business process, documenting at least eight risks with control and residual ratings.

  • Analyze one operational loss scenario and attribute root cause to a specific taxonomy category.

Your checkpoint

A risk appetite statement with three tolerance metrics plus a completed self-assessment for one process covering at least eight risks.

Week 6

Program Administration, Monitoring, and Reporting & Risk Management Fundamentals and Governance

  • Design a KRI dashboard with six indicators, each with a green, amber, and red threshold and a named data source.

  • Draft a one-page monthly risk report aimed at a risk committee, including movement since last period and two recommended actions.

  • Outline the incident capture, escalation, and claims-handling workflow as a numbered sequence with decision points.

  • Build a 12-month monitoring calendar assigning each recurring activity a frequency, owner, and output.

  • Re-audit your week 1 notes and list any governance objectives you still cannot explain from memory.

Your checkpoint

A one-page executive risk report including a six-indicator KRI dashboard with thresholds and two recommended actions.

Week 7

Risk Management Fundamentals and Governance & Risk Identification and Exposure Analysis & Risk Control and Loss Prevention & Risk Financing and Insurance & Enterprise and Operational Risk Management & Program Administration, Monitoring, and Reporting

  • Re-score all six domains from your practice accuracy data and rank the two weakest by miss rate.

  • Write a condensed one-page summary sheet for each of your two weakest domains, limited to facts you can state without notes.

  • Complete a timed 60-question mixed set and record the domain and error type for every miss.

  • Re-explain aloud ten missed items until each explanation is accurate and under 60 seconds.

  • Rebuild the formulas for expected loss, residual risk, retained loss, and total cost of risk from a blank page.

Your checkpoint

A gap-analysis sheet ranking all six domains by miss rate plus two one-page summary sheets for the weakest domains.

Week 8

Risk Management Fundamentals and Governance & Risk Identification and Exposure Analysis & Risk Control and Loss Prevention & Risk Financing and Insurance & Enterprise and Operational Risk Management & Program Administration, Monitoring, and Reporting

  • Complete two full-length timed mock exams under exam conditions with no reference material.

  • Log every incorrect answer by domain, topic, and error type (knowledge gap, misread, calculation, or guess).

  • Re-teach the ten most frequent error themes using your own worked examples.

  • Drill all quantitative formulas until each can be applied correctly three times in a row.

  • Finalize a one-page exam-day plan covering timing per section and a strategy for flagging and returning to hard items.

Your checkpoint

Two scored mock exams with a full correction log, showing a second-mock score of at least 80 percent.

Milestones

Week 2: Score at least 70 percent on a 25-question self-written quiz covering domains 1 and 2, and confirm the risk register contains 15 scored, ranked entries.

Week 4: Score at least 75 percent on a timed 40-question set spanning domains 1 through 4, and complete the total cost of risk worksheet without reference notes.

Week 6: Score at least 75 percent on a timed 40-question set spanning domains 3 through 6, and produce the one-page committee report and KRI dashboard without templates.

Week 8: Score at least 80 percent on the second full-length mock and at least 70 percent in every individual domain, with no domain below 60 percent on either mock.