More study resources

About this exam

The SAMRA exam tests whether a candidate can run a risk assessment end to end: framing the risk question, choosing a method, gathering evidence, scoring likelihood and consequence, deciding on treatment, and communicating the result to people who will act on it. It is aimed at practitioners who already touch risk in their work - risk officers, project and program managers, auditors, compliance and operations staff, analysts, and engineers with safety or quality responsibilities - and who want a structured, defensible way to demonstrate that competence. The question set spans the full lifecycle, with the largest share devoted to fundamentals and risk identification and analysis, and smaller blocks on treatment, communication, monitoring, governance and standards, project risk, and emerging risks and resilience. The exam is multiple choice, so it rewards precise reading and the ability to distinguish the correct technique or control from near-miss options rather than the ability to write essays. Preparation works best in two passes: first build the vocabulary and process model from a recognized framework, then drill scenario questions until you can justify why each distractor fails. Document your reasoning as you practise; the exam rewards people who can show their working. The official body publishes current details on format, scheduling, fees, and scoring on its website.

What you'll study

Common questions

About SAMRA preparation

What is the exam format?

It is delivered as multiple-choice questions covering the eight published domains. The official body publishes the current question count, time allowance, and delivery method on its website, so check there before you book rather than relying on secondhand accounts.

How difficult is it in practice?

Most candidates find the terminology manageable and the scenario questions harder than expected. The difficulty lies in choosing between two plausible answers, not in recalling definitions. If you can explain why each wrong option is wrong, you are usually ready.

Can I retake it if I fail?

Retake rules, waiting periods, and any additional fees are set by the awarding body and change from time to time. Consult its official site for the current policy before you schedule a second attempt, and plan your first attempt as if it were the only one.

How long should I study?

A common pattern is six to ten weeks of part-time study for someone already working in a risk-adjacent role, longer if the vocabulary is new. Track hours against weak domains rather than aiming for a fixed total, and reserve the final two weeks for timed practice.

In what order should I study the domains?

Start with fundamentals, then identification, analysis, and evaluation, because later domains assume that vocabulary. Move to treatment, then communication and monitoring. Cover governance, project risk, and emerging risks last, revisiting them in short cycles so they stay fresh.

What are the most common failure modes?

Three recur: memorizing definitions without practising application, misreading questions that ask for the least appropriate option, and neglecting the lower-weight domains. A fourth is ignoring quantitative basics such as risk matrices and expected-value reasoning, which appear inside scenario questions.

Do I need to know specific standards by number?

You should recognize the major frameworks and what each is for, but the exam tests understanding rather than citation. Know when a framework applies and what it requires conceptually. Rote recall of clause numbers is a poor use of study time.

How should I handle calculation questions?

Learn the small set of tools that recur: risk matrices, expected value, and simple probability combinations. Practise them until the arithmetic is automatic, then focus on interpreting the result. Most errors come from misreading what the question asks, not from the math.

Is prior work experience required?

Eligibility conditions are set by the awarding body and are not fixed here. Check its website for current entry requirements. Regardless of eligibility, candidates with real exposure to risk registers or assessments find the scenario questions noticeably easier.

How is the exam scored?

Scoring, the passing standard, and whether results are reported by domain are determined by the awarding body. Its official site carries the current information. Knowing whether domain-level feedback is provided matters, because it shapes how you plan a retake.