CRM55 study plan
CRM55 · Give each week a clear focus.
8 weeks · About 6 hours per week
Risk Management Fundamentals and Governance
Define risk, uncertainty, hazard, exposure, and loss in your own words and attach one concrete workplace example to each term.
Diagram the full risk management process from objective setting through monitoring, labeling the input and output of every stage.
Build a role-accountability table covering board, risk committee, CRO, business unit owners, and internal audit, writing one accountability sentence per role.
Summarize the core governance expectations common to major risk frameworks and note two points where they diverge.
Write five original exam-style questions on governance structure and answer them without notes.
Your checkpoint
A two-page governance map containing the process diagram and the role-accountability table, self-scored against a 10-point checklist you write yourself.
Risk Identification and Exposure Analysis
Populate a risk register with at least 15 distinct risks spread across at least four risk categories.
Apply three different identification techniques (structured brainstorming, checklist review, and process walk-through) and record which technique surfaced which risk.
Score every register entry for likelihood and severity on a 5x5 scale and convert each score into an annualized expected loss figure.
Rank the register by expected loss and identify the Pareto group that drives roughly 80 percent of total exposure.
Stress-test three high-ranked risks by doubling severity and note which ones move into a different treatment tier.
Your checkpoint
A 15-row risk register spreadsheet with likelihood, severity, expected loss, rank, and a Pareto view of the top risks.
Risk Control and Loss Prevention & Risk Identification and Exposure Analysis
Classify every existing control for your top ten risks as preventive, detective, or corrective, and flag any risk with only one control type.
Apply a hierarchy-of-controls ranking to propose a stronger substitute for your three weakest controls.
Recompute residual likelihood and severity for the top ten risks after controls and state the assumption behind each adjustment.
Identify five control gaps and draft one specific remediation action, owner, and target date for each.
Estimate the annual cost and expected loss reduction for two proposed controls and state whether each clears a break-even test.
Your checkpoint
A control matrix covering the top ten risks with inherent versus residual ratings plus a cost-benefit note for two proposed controls.
Risk Financing and Insurance
Compare retention, transfer, and hybrid financing options and state the decision criteria that favor each.
Calculate retained loss for three scenarios that vary deductible, limit, and coinsurance, showing your arithmetic line by line.
Break a specimen policy into declarations, insuring agreement, exclusions, and conditions, and explain what each section controls.
Compute total cost of risk for a sample program by summing premiums, retained losses, administrative cost, and uninsured losses.
Recommend a retention level for that program and defend it against a stated loss tolerance.
Your checkpoint
A total cost of risk worksheet covering three scenarios plus a one-page recommendation memo that justifies the chosen retention level.
Enterprise and Operational Risk Management
Contrast enterprise-wide risk management with siloed risk management using two practical decision examples.
Draft a risk appetite statement that includes three quantified tolerance metrics and one escalation trigger for each.
Map an operational risk taxonomy across people, process, systems, and external events, and place ten real risks into it.
Run a risk and control self-assessment on one business process, documenting at least eight risks with control and residual ratings.
Analyze one operational loss scenario and attribute root cause to a specific taxonomy category.
Your checkpoint
A risk appetite statement with three tolerance metrics plus a completed self-assessment for one process covering at least eight risks.
Program Administration, Monitoring, and Reporting & Risk Management Fundamentals and Governance
Design a KRI dashboard with six indicators, each with a green, amber, and red threshold and a named data source.
Draft a one-page monthly risk report aimed at a risk committee, including movement since last period and two recommended actions.
Outline the incident capture, escalation, and claims-handling workflow as a numbered sequence with decision points.
Build a 12-month monitoring calendar assigning each recurring activity a frequency, owner, and output.
Re-audit your week 1 notes and list any governance objectives you still cannot explain from memory.
Your checkpoint
A one-page executive risk report including a six-indicator KRI dashboard with thresholds and two recommended actions.
Risk Management Fundamentals and Governance & Risk Identification and Exposure Analysis & Risk Control and Loss Prevention & Risk Financing and Insurance & Enterprise and Operational Risk Management & Program Administration, Monitoring, and Reporting
Re-score all six domains from your practice accuracy data and rank the two weakest by miss rate.
Write a condensed one-page summary sheet for each of your two weakest domains, limited to facts you can state without notes.
Complete a timed 60-question mixed set and record the domain and error type for every miss.
Re-explain aloud ten missed items until each explanation is accurate and under 60 seconds.
Rebuild the formulas for expected loss, residual risk, retained loss, and total cost of risk from a blank page.
Your checkpoint
A gap-analysis sheet ranking all six domains by miss rate plus two one-page summary sheets for the weakest domains.
Risk Management Fundamentals and Governance & Risk Identification and Exposure Analysis & Risk Control and Loss Prevention & Risk Financing and Insurance & Enterprise and Operational Risk Management & Program Administration, Monitoring, and Reporting
Complete two full-length timed mock exams under exam conditions with no reference material.
Log every incorrect answer by domain, topic, and error type (knowledge gap, misread, calculation, or guess).
Re-teach the ten most frequent error themes using your own worked examples.
Drill all quantitative formulas until each can be applied correctly three times in a row.
Finalize a one-page exam-day plan covering timing per section and a strategy for flagging and returning to hard items.
Your checkpoint
Two scored mock exams with a full correction log, showing a second-mock score of at least 80 percent.
Milestones
Week 2: Score at least 70 percent on a 25-question self-written quiz covering domains 1 and 2, and confirm the risk register contains 15 scored, ranked entries.
Week 4: Score at least 75 percent on a timed 40-question set spanning domains 1 through 4, and complete the total cost of risk worksheet without reference notes.
Week 6: Score at least 75 percent on a timed 40-question set spanning domains 3 through 6, and produce the one-page committee report and KRI dashboard without templates.
Week 8: Score at least 80 percent on the second full-length mock and at least 70 percent in every individual domain, with no domain below 60 percent on either mock.