IFoA SP9
IFoA SP9 - Specialist Principles: Enterprise Risk Management
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
SP9 - Specialist Principles: Enterprise Risk Management is one of the Specialist Principles subjects in the Institute and Faculty of Actuaries (IFoA) professional qualification, the stage that sits between the Core Principles subjects and the Specialist Advanced subjects that lead to Fellowship. It is aimed at candidates who already have a grounding in actuarial risk concepts and who want to work - or already work - in risk, capital, regulatory reporting, model governance or consultancy, where the ability to reason about risk across an entire organisation matters more than any single technical calculation. The exam is assessed by written examination, so the skill being tested is structured, critical argument under time pressure rather than numerical drill. The syllabus spans the ERM framework and governance; risk identification, classification and risk registers; risk measurement, quantification and modelling; risk appetite, tolerance, limits and risk-reward trade-offs; risk culture, conduct and behavioural aspects; risk reporting and stakeholder communication; capital management, allocation and solvency risk; and emerging and strategic risk, including how ERM is embedded in decision-making. Preparation should combine the IFoA's published curriculum and past examination material with genuine application: read each syllabus outcome, practise full written answers against past papers, mark them against the examiners' reports, and test ideas against real risk problems from your own organisation. Check the IFoA website for current exam dates, entry deadlines and regulations.
What you'll study
About IFoA SP9 preparation
What format does the SP9 exam take?
It is a written examination, so you should expect long-form answers rather than a pure multiple-choice test. Questions typically ask you to explain, discuss or critically evaluate a risk scenario, often with a business context. Confirm the current sitting arrangements, timetable and any permitted materials on the IFoA Exams pages before you enter.
How difficult is SP9 compared with the Core Principles exams?
The difficulty is different rather than simply higher. Core Principles subjects reward accurate technique; SP9 rewards breadth of reading and the quality of your judgement. Marks come from making sensible, well-justified points across several dimensions of a problem, not from finding one correct number. Candidates who rely on memorised lists without applying them to the scenario tend to plateau.
Can I resit if I fail, and how often are sittings held?
Resits are possible, subject to the IFoA's exam regulations and any limits on attempts. Sitting frequency and entry deadlines are set by the IFoA and published on its Exams pages, so check there rather than relying on second-hand information. Plan your resit around the next available sitting and use your examiners' report to target the weakest areas.
How should I order my study across the syllabus?
Start with the framework and governance material, then risk identification and classification, because later topics such as appetite, measurement and reporting all depend on them. Interleave capital and solvency material with measurement rather than treating it as a separate block. Finish with emerging and strategic risk and embedding, which draw on everything before and are usually easier to answer once the rest is secure.
How much study time do I need, and when should I start?
There is no official figure, and the honest answer is that it depends on your prior ERM exposure and how much of the reading you can apply at work. Work backwards from the sitting date, protect regular weekly slots rather than relying on a final cram, and reserve the last few weeks almost entirely for timed past-paper practice and review.
What are the most common reasons candidates fail?
Answering the topic rather than the question is the biggest one: candidates write everything they know about risk appetite instead of addressing the specific scenario. Others give generic textbook points with no application, ignore the command verb, or run out of time because they over-write early questions. Practising under timed conditions and reading examiners' reports fixes most of these.
Do I need practical risk management experience to pass?
No, but it helps. Candidates who have seen a risk register, a board risk report or a capital model have concrete examples to draw on and find the applied questions easier. If you lack that exposure, read published risk disclosures and annual reports from insurers and other financial firms, and use them as substitute case studies for practice answers.
Is SP9 only relevant to people working in insurance?
No. Enterprise risk management is taught as a general discipline, and the frameworks, appetite-setting, culture, reporting and capital themes apply across pensions, banking, investment and wider corporate settings. Candidates in consulting, regulation or non-insurance roles often find the subject directly usable in their day-to-day work, which is also a good way to prepare.
Where should I look for authoritative exam information?
Use the Institute and Faculty of Actuaries website at actuaries.org.uk, specifically the Qualify and Exams sections, for the current curriculum, exam dates, entry requirements and essential resources. The site also publishes professional standards and risk alerts that are useful background for the conduct and governance parts of the syllabus.