CERP study plan

Map the three-lines-of-defence model and the board/committee risk governance structure, labelling decision rights and escalation paths

Compare at least three ERM framework architectures (COSO-style, ISO-style, regulatory) and tabulate where they converge and diverge

Deconstruct a risk appetite statement into appetite, tolerance, and limit layers, and write one calibrated cascade for a lending and a trading activity

Explain how risk culture, incentives, and tone-at-the-top are assessed and evidenced, listing observable indicators for each

Build a full enterprise risk taxonomy spanning credit, market, liquidity, operational, conduct, strategic, and emerging categories with at least two sub-risks each

Apply qualitative and quantitative assessment techniques (likelihood-impact matrices, scoring scales, scenario workshops) to the same risk and compare outputs

Demonstrate risk aggregation by rolling sub-entity exposures into an enterprise view and identifying correlation and double-counting pitfalls

Distinguish inherent versus residual risk and articulate where control effectiveness sits in the assessment chain

Compute expected loss, probability of default, loss given default, and exposure at default for a small sample portfolio and interpret the sensitivity of each input

Contrast standardized versus internal-ratings-based capital treatment and explain what drives risk-weighted assets under each

Analyse credit concentration, single-name and sector limits, and collateral and credit-risk-mitigation effects on exposure

Evaluate credit underwriting, monitoring, watchlist, and provisioning stages against impairment rules

Compute duration, modified duration, DV01, and a simple value-at-risk figure, and explain the assumptions and failure modes of each

Calculate liquidity coverage and net stable funding metrics from a simplified balance sheet and interpret the shortfall drivers

Separate trading-book market risk from banking-book interest-rate risk in the repricing gap and earnings-at-risk sense

Explain basis, yield-curve, and spread risks and identify which hedging instrument addresses each

Design a stress-testing programme: choose scenarios, map them to risk drivers, and state reverse-stress-testing triggers

Translate a macroeconomic scenario into credit losses, market moves, and funding outflows, then into a capital and ratio impact

Build a capital stack walkthrough (common equity, additional tier one, tier two) and show how stress erodes each layer and each ratio

Explain model risk management expectations: validation, backtesting, and documentation standards for quantified estimates

Run a risk-and-control self-assessment on a chosen process, identifying key controls, control gaps, and residual ratings

Classify operational risk events across people, process, systems, and external causes, and explain how loss data and near misses feed capital and control design

Map technology and cyber risk: identity controls, third-party and cloud concentration, resilience and recovery objectives, and data-integrity risk

Distinguish business continuity from operational resilience and set impact tolerances for a critical business service

Trace the compliance risk lifecycle from regulatory change intake through control mapping, monitoring, and breach remediation

Analyse a conduct-risk case using a drivers framework (incentives, product design, culture, disclosure) and prescribe preventive controls

Distinguish legal risk, regulatory sanction risk, and conduct risk, and identify where they overlap in a single event

Assess strategic and reputational risk exposure by linking a business-plan assumption to a reputational consequence and an emerging-risk trigger

Draft a board-level risk report with the right altitude: appetite position, top and emerging risks, limit breaches, and forward-looking indicators

Select and critique key risk indicators for lagging-versus-leading quality and link each to a tolerance threshold

Integrate all ten domains into one enterprise risk narrative and rehearse articulating trade-offs between them

Complete a timed mock exam and convert every wrong answer into a domain-tagged review item