CRM56
Certified Risk Manager (CRM) - Exam 56
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certified Risk Manager (CRM) credential, offered here as Exam 56, is a professional designation for practitioners who want to demonstrate breadth across the risk discipline rather than depth in a single silo. It suits risk managers, compliance and audit staff, credit and treasury analysts, and consultants who increasingly sit in cross-functional risk roles. The exam is multiple choice and samples ten domains: risk management fundamentals and governance; risk identification and assessment; measurement and quantification; treatment, mitigation, and control; enterprise risk management frameworks; credit and counterparty risk; market, liquidity, and interest rate risk; operational, compliance, and legal risk; reporting, monitoring, and communication; and risk culture, ethics, and professional standards. The weighting is broad and fairly even, with governance, assessment, measurement, and treatment carrying slightly more weight, so candidates should build a balanced base rather than over-invest in quantitative topics. Preparation typically combines a study guide or course, a working knowledge of ERM frameworks such as COSO-style and ISO 31000-style models, and plenty of practice applying concepts to short scenarios. Because the exam rewards judgment as much as recall, the most effective routine is to read a topic, then explain aloud how you would apply it in a real organisation. This page is an independent study resource and is not affiliated with or endorsed by the certifying body; always confirm current details on the official website.
What you'll study
About CRM56 preparation
What is the exam format?
It is a multiple-choice exam delivered in a single sitting. Expect scenario-based stems that ask you to choose the best response rather than recall a definition. The official body publishes the current number of items, delivery options, and any calculator or reference rules, so check its website before booking.
How long is the exam and how many questions are there?
Those figures change between exam cycles, so this page does not state them. The certifying body publishes the current item count and time allowance on its official site, and your booking confirmation will repeat them. Budget roughly a minute per item when practising so your pacing is realistic.
How hard is it?
Most candidates find the difficulty comes from breadth and judgment, not obscure maths. The quantitative domains are usually formula-light and concept-heavy. People with several years of applied risk experience typically need focused revision on terminology and frameworks; career changers need more time on credit and market risk basics.
What happens if I fail - can I retake it?
Retake rules, waiting periods, and any fee differences are set by the certifying body and are not reproduced here. Check the official site or your candidate handbook for the current policy before you sit the exam, and plan your study schedule so a retake does not collide with a work deadline.
What should I study first?
Start with fundamentals and governance, then identification and assessment. Those domains supply vocabulary the rest of the exam assumes. Move next to measurement, treatment, and ERM frameworks, then the risk-type domains. Finish with reporting, culture, and ethics, which are short and reward careful reading rather than memorisation.
Do I need to memorise formulas?
You need to understand what measures such as duration, value at risk, expected loss, and liquidity ratios tell you and when they mislead. Rote memorisation of formulas rarely helps because items usually test interpretation. Know the inputs, the assumptions, and the main limitations of each measure.
Why do candidates fail?
Common causes are over-studying quantitative material and neglecting governance and culture, choosing an answer that is technically true but does not address the question asked, and failing to note words like first, best, or most likely. Weak candidates also skip practice questions and never test their pacing.
How much preparation time is typical?
There is no official figure. A realistic plan is eight to twelve weeks of steady study at a few hours a week for experienced practitioners, more for newcomers. Spread sessions across all ten domains rather than cramming one, and reserve the final two weeks for mixed practice sets and review.
Is this page affiliated with the certifying organisation?
No. This is independent study material written to help you prepare. It is not endorsed by, connected to, or sourced from the certifying body, and it does not reproduce any official question bank. Always treat the official website as the authority on eligibility, fees, scheduling, and scoring.