CISR Risk Management study materials
CISR Risk Management study resources

CISR Risk Management study plan

CISR Risk Management · Give each week a clear focus.

8 weeks · About 6 hours per week

Week 1

Introduction to Risk Management & Risk Identification

  • Define risk, uncertainty, hazard, exposure, and loss in your own words and write a one-paragraph glossary entry for each that you can defend without notes.

  • Distinguish pure versus speculative risk, static versus dynamic risk, and fundamental versus particular risk by sorting 15 self-written workplace examples into the correct categories.

  • Map the six CISR domains and state in one sentence what each domain contributes to the risk management process, so you can place any new concept on the map immediately.

  • Build a personal risk register template with columns for description, category, likelihood, impact, owner, control, and financing treatment, then populate it with 10 real risks from your own organization or a familiar one.

Your checkpoint

A one-page domain map plus a 10-row risk register in a spreadsheet, reviewed against your glossary for consistent terminology.

Week 2

Risk Identification

  • Apply at least five identification techniques (brainstorming, checklist, flowchart, inspection, scenario analysis, interview, Delphi) to the same organization and record what each technique surfaced that the others missed.

  • Trace three core business processes end to end in a flowchart and mark every point where a single failure would halt the process.

  • Interview one colleague or friend who works in operations, finance, or safety and convert their answers into at least eight candidate risks with explicit causes and consequences.

  • Classify each identified risk by source (human, technological, organizational, external) and by whether it is insurable, then flag any risk that appears twice under different names so duplicates can be merged.

Your checkpoint

A consolidated risk identification log of at least 30 distinct risks, each with cause, consequence, source category, and the technique that found it.

Week 3

Risk Analysis

  • Compute expected loss for three risks using frequency and severity assumptions, and explain why expected loss alone is insufficient for deciding on risk treatment.

  • Construct a simple loss distribution or severity table for one high-variance risk and identify the threshold beyond which a single event would threaten solvency or budget.

  • Rank your 30 identified risks on a likelihood-impact matrix and justify the placement of the five highest-ranked risks with evidence rather than intuition.

  • Perform a qualitative-versus-quantitative comparison on the same risk, noting where the quantitative answer changed your ranking and where it merely confirmed it.

Your checkpoint

A risk analysis worksheet with expected-loss calculations, a completed heat map covering all identified risks, and a short written justification for the top five.

Week 4

Risk Control

  • Distinguish avoidance, prevention, reduction, separation, duplication, and transfer by matching each to concrete controls from your own risk register.

  • Design a layered control package for your single largest risk, showing how the layers interact and where a single point of failure remains.

  • Evaluate the cost of each proposed control against the expected loss it removes, and reject at least one control as uneconomic with a written rationale.

  • Draft a one-page residual risk statement for the top risk after controls, specifying who accepts the residual and on what authority.

Your checkpoint

A control plan for the top five risks showing chosen treatment, expected loss before and after, cost of control, and named owner of residual risk.

Week 5

Risk Financing

  • Explain retention, transfer, and hybrid financing options, and match each of your top five residual risks to an appropriate financing approach with reasoning.

  • Interpret the core sections of an insurance policy - insuring agreement, exclusions, conditions, limits, deductibles, and coinsurance - and identify three exclusions that would affect your own risk register.

  • Compare deductible levels for one risk by calculating the premium saved against the additional retained loss exposure at two or three deductible points.

  • Assess captive or self-insurance feasibility for your organization by listing the capital, administrative, and regulatory requirements it would impose.

Your checkpoint

A risk financing summary table mapping every top-five residual risk to a financing method, with a deductible-versus-retention calculation for at least one risk.

Week 6

Risk Administration & Introduction to Risk Management

  • Draft a risk management policy statement of no more than 300 words that sets objectives, scope, authority, and reporting lines.

  • Define roles for risk owner, risk manager, and board or senior leadership, and write a one-line accountability statement for each role in your own organization.

  • Design a monitoring dashboard with at least four indicators - such as claim frequency, near-miss count, control completion rate, and residual exposure trend - and specify the review cadence for each.

  • Revisit your week 1 glossary and domain map and correct or sharpen any definition that later study proved imprecise.

Your checkpoint

A policy statement, a roles-and-responsibilities chart, and a monitoring dashboard specification with named metrics and review intervals.

Week 7

Introduction to Risk Management & Risk Identification & Risk Analysis & Risk Control & Risk Financing & Risk Administration

  • Work through at least 60 practice questions spanning all six domains, logging every wrong answer with the underlying concept rather than the question text.

  • Re-study the two domains with the lowest practice accuracy and rewrite the relevant sections of your glossary from memory before checking.

  • Teach one domain aloud for ten minutes without notes, then list the three points where you hesitated and close those gaps the same day.

  • Time yourself on a mixed 40-question set and record your pace per question so exam-day timing is rehearsed rather than assumed.

Your checkpoint

A wrong-answer log with at least 20 entries, each mapped to a domain and concept, plus a ranked list of your three weakest areas.

Week 8

Introduction to Risk Management & Risk Identification & Risk Analysis & Risk Control & Risk Financing & Risk Administration

  • Complete two full-length timed practice exams under exam conditions and score both, tracking domain-level accuracy rather than only the total.

  • Close the remaining gaps identified in week 7 by rewriting the affected glossary entries and re-testing on those domains only.

  • Recite the risk management process end to end and place each domain's tools correctly within it, confirming the integration you built in week 1.

  • Reduce your notes to a single one-page pre-exam sheet containing only definitions and distinctions you have repeatedly confused.

Your checkpoint

Two scored practice exams with a domain-by-domain accuracy table and a final one-page review sheet.

Milestones

Week 2: You can name at least five risk identification techniques and state one specific strength of each, and your risk log contains 30 or more distinct, non-duplicated risks.

Week 4: You can calculate expected loss for a risk from frequency and severity figures, and every one of your top five risks has a named control, a cost, and an owner of residual risk.

Week 6: You can explain how a residual risk moves from control to financing to monitoring, and your policy statement, roles chart, and dashboard together cover all six domains.

Week 8: Both timed practice exams are complete, domain-level accuracy is recorded for each, and no domain falls below your self-set passing threshold.