CRM56 study guide
CRM56 · Work through your exam, one topic at a time.
The Certified Risk Manager (CRM) credential, offered here as Exam 56, is a professional designation for practitioners who want to demonstrate breadth across the risk discipline rather than depth in a single silo. It suits risk managers, compliance and audit staff, credit and treasury analysts, and consultants who increasingly sit in cross-functional risk roles. The CRM56 study guide has 10 sections and about 2,770 words.
01Risk Management Fundamentals and Governance
Risk is the effect of uncertainty on objectives, expressed as a combination of likelihood and impact. Candidates must distinguish inherent risk (before controls), residual risk (after controls), and target risk (the level the board is willing to accept).
325 words, about 2 min02Risk Identification and Risk Assessment
Risk identification is systematic, not intuitive. Candidates should know brainstorming and workshops, interviews, process mapping, scenario analysis, checklists, incident data review, and bow-tie analysis.
285 words, about 1 min03Risk Measurement and Quantification
Quantification converts risk into distributions of loss. Candidates must understand exposure, probability, severity, expected loss, unexpected loss, and confidence levels.
299 words, about 1 min04Risk Treatment, Mitigation, and Control
The standard treatment set is avoid, reduce, transfer, and accept, with exploit or enhance sometimes added for upside risk. Avoidance removes the activity; reduction adds preventive or detective controls; transfer shifts financial consequences through insurance, hedging, or outsourcing; acceptance requires documented authority within appetite.
284 words, about 1 min05Enterprise Risk Management Frameworks
An ERM framework integrates risk management with strategy, governance, and performance across the enterprise. Candidates should recognise the components common to major frameworks without reproducing any proprietary text: governance and culture, strategy and objective setting, performance, review and revision, and information and communication.
282 words, about 1 min06Credit and Counterparty Risk
Credit risk is loss from a counterparty failing to meet obligations. Core elements are probability of default, exposure at default, loss given default, and maturity.
281 words, about 1 min07Market, Liquidity, and Interest Rate Risk
Market risk is loss from movements in prices, rates, and volatilities. It includes interest rate, equity, foreign exchange, commodity, and spread risk.
250 words, about 1 min08Operational, Compliance, and Legal Risk
Operational risk is loss from inadequate or failed internal processes, people, systems, or external events. It includes fraud, cyber, conduct, processing errors, and business disruption.
260 words, about 1 min09Risk Reporting, Monitoring, and Communication
Risk reporting informs decision-makers and enables challenge. Good reports are accurate, timely, relevant, and comparable over time.
249 words, about 1 min10Risk Culture, Ethics, and Professional Standards
Risk culture is the shared values and behaviours that determine how risk is identified and managed. Indicators include tone at the top, accountability, incentives, challenge, speak-up mechanisms, and response to bad news.
255 words, about 1 min