CRM Risk common mistakes
CRM Risk · Understand the traps and how to avoid them.
Uses 'risk', 'peril', 'hazard' and 'uncertainty' interchangeably - for example, answering that 'fire is the risk' in a scenario stem, or selecting a choice that swaps 'hazard' for 'peril'.
Ordinary language conflates these terms, and candidates skim the stem for a familiar noun instead of reading the definitional hinge the item is built on.
What to do instead
Before answering any terminology item, write the four definitions on scratch paper (risk = uncertainty about outcomes; peril = cause of loss; hazard = condition that increases frequency or severity) and tag the stem's key noun. Eliminate any option that mislabels the term.
Identifies only the vivid property exposures in a scenario (building, inventory, equipment) and stops, missing liability, personnel, net income/business interruption and crime exposures - or analyses each exposure in isolation without noting how they interact.
Property loss is the most concrete and best-insured exposure, so it anchors attention; the candidate answers the first category that comes to mind rather than sweeping a framework.
What to do instead
Run a fixed exposure checklist on every scenario - property, liability, personnel/human resources, net income and extra expense, crime/cyber - and require at least one line per category before selecting. If the stem involves an enterprise-wide question, note where silo treatment would miss a correlated or cumulative exposure.
Recommends a loss-control measure aimed at reducing how often a loss occurs when the data show the problem is the size of an individual loss (or the reverse), and justifies it with a general statement about 'reducing risk'.
Frequency and severity are reported with similar-looking statistics, and several options in the item are all legitimate control techniques, so candidates grab the first plausible one without diagnosing the loss pattern.
What to do instead
Before evaluating any option, write one line: 'this is a frequency problem' or 'this is a severity problem', based on claim counts versus largest/mean claim size in the stem. Then screen every option against that label and discard those aimed at the other dimension.
Applies a mean-loss or normal-distribution forecast to a small, sparse or highly skewed loss sample, or extrapolates a fitted trend line beyond the range of the data provided.
The arithmetic is straightforward so it feels safe; candidates do not check whether the assumptions underlying the technique (large n, symmetry, stability of the trend) actually hold for the numbers given.
What to do instead
State sample size and data shape first. If n is small or total losses are dominated by one or two events, avoid mean-based forecasts and reason with ranges, scenario analysis or probable maximum loss instead; if asked to forecast, keep the projection inside the observed data range.
Treats avoidance, prevention, reduction, separation, duplication and transfer as interchangeable, and classifies a contractual hold-harmless or indemnity clause as if it were insurance.
The techniques overlap in everyday speech and most options in a control item are 'risk control' in a loose sense, so the mechanism distinctions are never applied.
What to do instead
Classify each option by mechanism before comparing: does it eliminate the activity (avoidance), cut frequency, cut severity, spread one exposure across units, or move the financial consequence to another party? Then match the mechanism to the frequency/severity diagnosis. Distinguish contractual transfer from insurance transfer explicitly.
Treats the crisis/disaster plan as a document to be produced rather than a capability to be tested, and answers claims questions by focusing on the settlement amount while overlooking policyholder duties such as prompt notice, proof of loss, mitigation and preserving subrogation rights.
Study time concentrates on pre-loss technique and coverage design; the post-loss phase reads as administrative detail and gets skimmed.
What to do instead
For continuity items, check for plan testing and maintenance, named authority, crisis communication and recovery objectives (RTO/RPO). For claims items, list the policyholder's duties in sequence and ask which duty the fact pattern threatens before evaluating the settlement options.
Labels a captive, a large deductible or a self-insured retention as 'risk transfer', and treats alternative risk transfer structures (finite insurance, parametric covers, securitization, insurance-linked warranties) as ordinary commercial insurance.
These arrangements sit on a retention–transfer continuum and involve an insurer or capital-market counterparty, so the label 'insurance' is tempting and the retained layer is easily overlooked.
What to do instead
Ask where the loss ultimately lands: any layer funded by the organization's own balance sheet is retention, and only the layer genuinely borne by an unrelated third party is transfer. Place each ART structure on that continuum on paper before answering.
Chooses among risk financing alternatives by comparing premium or retention cost alone, ignoring total cost of risk (administration, claims handling, taxes, collateral, cost of capital, expected retained losses) and the time value of money across multi-year options.
Premium is the one number presented on the page, so it looks like the only comparable figure across alternatives.
What to do instead
Build a one-line total cost of risk for each option, including expected retained losses and frictional costs, and discount multi-year cash flows to a common date before choosing.
Answers organizational questions with a generic 'senior management must support risk management' and cannot distinguish between two plausible-sounding options about authority, reporting lines or accountability.
Governance material sounds like common sense, so it is skimmed rather than memorized, leaving no criteria to discriminate among options.
What to do instead
Memorize a short governance checklist - written policy, defined risk manager role with authority, risk committee, reporting line, line-manager accountability, communication and training, monitoring and feedback - and score every option against that list.
Assumes home-country conditions transfer abroad, ignoring differences in legal liability regimes, currency exposure, political and regulatory risk, local insurance and benefit requirements, and cultural attitudes to risk in international scenarios.
Domestic practice is over-learned, so an international stem looks like the same question with a country name inserted and the added exposures go unnoticed.
What to do instead
Apply a short international scan to every such item: legal/regulatory differences, currency and political risk, local insurance and statutory benefit requirements, and cultural/behavioural differences in risk tolerance and reporting.