MoR Practitioner study plan

Define risk, uncertainty, and opportunity in your own words and distinguish risk from issue, hazard, and problem

Explain the difference between inherent and residual risk and compute a simple residual exposure from a likelihood-impact matrix

Classify five example risks by type (strategic, operational, financial, compliance, reputational) and justify each classification

Describe the principle that risk management creates and protects value and give one organisational example of each

Compare at least four risk response options (avoid, reduce, transfer, accept, exploit) and select an appropriate response for eight short scenarios

Explain risk appetite, risk tolerance, and risk capacity and state how each differs from the others

Map the stages of a generic risk management process (identify, assess, respond, monitor, report) and state the purpose and key output of each stage

Identify the roles of risk owner, risk action owner, and assurance provider in a worked example

Draft a risk management framework outline covering scope, mandate, policy, process, roles, reporting, and review

Explain how a risk management policy connects to organisational objectives and governance structures

Describe the components of a risk management framework and how they interrelate (mandate, commitment, roles, resources, communication)

Produce an accountability matrix (RACI-style) for at least six risk activities across three role types

Design a risk register schema with at least eight fields (ID, description, cause, consequence, likelihood, impact, rating, owner, response, status, review date)

Write ten well-formed risk statements using a cause-event-consequence structure and remove vague wording

Apply a 5x5 likelihood-impact matrix consistently to ten risks and document the rating criteria for each level

Explain how risk criteria and scales are set and why calibration matters for comparability

Explain at least three risk identification techniques (brainstorming, interviews, workshops, checklist, SWOT, scenario analysis) and state when each is most suitable

Describe qualitative versus quantitative assessment and identify one situation where each is appropriate

Outline how risk is monitored, reviewed, and reported, including escalation triggers and reporting cadence

Draft a treatment plan for three high-rated risks with actions, owners, due dates, and success measures

Explain how risk management is embedded into decision-making, planning, and performance management rather than run as a standalone exercise

Describe at least three ways to build risk culture, including tone from the top, incentives, training, and open reporting

Identify barriers to embedding (competing priorities, box-ticking, poor data, unclear ownership) and propose a mitigation for each

Design three indicators to measure risk management maturity or effectiveness

Design a review cycle for the risk framework including frequency, participants, inputs, and outputs

Explain the purpose of independent assurance and distinguish it from management self-assessment

Revisit the principles from Domain 1 and check your framework against each one, noting gaps

Prepare a short management report summarising risk status, trends, and recommended actions

Consolidate all notes into a single revision sheet covering each domain's key concepts and definitions

Answer 60 practice questions across all four domains and record your score by domain

Re-teach the three weakest topics in writing as if explaining to a colleague, then correct any errors

Complete two timed mixed-domain practice sets under exam conditions and review every wrong answer