Certified Risk Analyst (CRA) — Questions and Answers

Question 1: In credit risk analysis, LGD stands for:

Liquidity Gap Determination
Loss Given Default (Correct answer)
Leverage Gross Discounting
Loan Grade Distribution

Correct answer: Loss Given Default

Loss Given Default (LGD) is the percentage of an exposure that a lender loses when a borrower defaults, after accounting for recoveries.

Question 2: A CRA professional encounters an unfamiliar situation while performing operational risk events & kris duties. What is the most appropriate first action?

Proceed based on general assumptions to avoid delays
Skip the task entirely and move to the next assignment
Apply a solution from an unrelated field without verification
Consult relevant standards, guidelines, or a qualified supervisor before proceeding (Correct answer)

Correct answer: Consult relevant standards, guidelines, or a qualified supervisor before proceeding

When facing unfamiliar situations in operational risk events & kris, the most appropriate action is to consult relevant standards, guidelines, or a qualified supervisor. This ensures safety, accuracy, and compliance while building professional knowledge.

Question 3: When calibrating heat map color zones, which approach aligns risk zones with organizational risk appetite?

Setting zone boundaries based on the board-approved risk appetite and tolerance statements (Correct answer)
Copying color zones from an industry peer's published heat map
Assigning colors randomly to maintain objectivity
Using a fixed 3x3 grid with equal color zones regardless of strategy

Correct answer: Setting zone boundaries based on the board-approved risk appetite and tolerance statements

Zone boundaries should reflect the organization's own approved appetite and tolerance levels so the heat map is actionable and meaningful.

Question 4: When documenting activities related to risk appetite & tolerance frameworks, which practice is considered essential for CRA certification holders?

Completing documentation only when requested by auditors or supervisors
Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)
Keeping documentation in personal notes that are not accessible to other team members
Recording only outcomes while omitting the methods and processes used

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in risk appetite & tolerance frameworks. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 5: Stakeholder mapping in risk communication helps risk managers to:

Assign blame for risk events to specific stakeholders
Eliminate stakeholders with low influence from risk discussions
Identify each stakeholder's interest, influence, and information needs to tailor risk messages appropriately (Correct answer)
Determine which risks to hide from lower-level employees

Correct answer: Identify each stakeholder's interest, influence, and information needs to tailor risk messages appropriately

Stakeholder mapping allows risk managers to customize the depth, format, and frequency of risk communications based on each stakeholder's role and decision-making authority.

Question 6: The COSO 2013 Internal Control framework requires that the five components and 17 principles be:

Applied only to publicly traded companies
Assessed only at the entity level, not at the transaction level
Documented in a single enterprise risk policy
Present and functioning for an effective system of internal control (Correct answer)

Correct answer: Present and functioning for an effective system of internal control

All five components and 17 principles must be present and functioning together for internal control to be deemed effective under COSO 2013.

Question 7: When documenting activities related to emerging & geopolitical risks, which practice is considered essential for CRA certification holders?

Completing documentation only when requested by auditors or supervisors
Keeping documentation in personal notes that are not accessible to other team members
Recording only outcomes while omitting the methods and processes used
Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in emerging & geopolitical risks. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 8: A risk analyst is building a risk appetite framework for a fintech startup. Which element is MOST critical to establish first?

Risk reporting templates and dashboards
Board-approved overarching risk appetite statement (Correct answer)
Quantitative risk limits for each business unit
Operational risk tolerance thresholds

Correct answer: Board-approved overarching risk appetite statement

The board-approved overarching risk appetite statement provides strategic direction that all subsequent quantitative limits and thresholds must flow from.

Question 9: Which of the following best describes 'regulatory capital' as it applies to banks under Basel III?

Cash held in vault to meet daily withdrawal demands
Minimum equity and other qualifying capital that banks must hold relative to risk-weighted assets (Correct answer)
The total assets on a bank's balance sheet
Risk-weighted assets calculated for stress testing purposes

Correct answer: Minimum equity and other qualifying capital that banks must hold relative to risk-weighted assets

Under Basel III, regulatory capital is the minimum level of loss-absorbing capital (primarily common equity) banks must maintain relative to their risk-weighted assets.

Question 10: A risk appetite statement says the firm will 'not accept risks that could impair its investment-grade credit rating.' This is an example of which type of risk appetite expression?

Earnings-based quantitative limit
Constraint-based qualitative boundary (Correct answer)
Regulatory capital floor
Probabilistic loss threshold

Correct answer: Constraint-based qualitative boundary

Tying risk appetite to maintaining a credit rating is a qualitative constraint-based expression that defines a strategic boundary rather than a numeric loss limit.

Question 11: In the COSO Internal Control — Integrated Framework (2013), which principle under the Control Environment component addresses the assignment of authority and responsibility?

Principle 3 (Correct answer)
Principle 4
Principle 2
Principle 5

Correct answer: Principle 3

Principle 3 states that management establishes structures, reporting lines, and appropriate authorities and responsibilities.

Question 12: Which decision-making framework specifically accounts for ambiguity by distinguishing between situations where probabilities are known versus unknown?

Knight's distinction between risk and uncertainty (Correct answer)
Bayesian updating
Expected utility theory
Monte Carlo simulation

Correct answer: Knight's distinction between risk and uncertainty

Frank Knight distinguished between risk (known probabilities) and uncertainty (unknown probabilities), which is foundational to modern risk decision-making frameworks.

Question 13: Which of the following is a fundamental principle of regulatory capital requirements as it applies to Certified Risk Analyst?

Avoiding documentation to streamline workflow efficiency
Relying solely on personal experience without reference to guidelines
Prioritizing speed of completion over accuracy and compliance
Systematic evaluation and adherence to established industry standards (Correct answer)

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of regulatory capital requirements in Certified Risk Analyst is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 14: What does Value at Risk (VaR) measure?

Potential financial loss with given confidence (Correct answer)
Profit growth rate
Investment gains
Tax liabilities

Correct answer: Potential financial loss with given confidence

Value at Risk (VaR) is a widely used metric in financial risk management that quantifies the maximum potential loss an investment or portfolio could incur over a specified period, with a given level of confidence. For example, a 95% VaR of $1 million means there is a 5% chance of losing more than $1 million.

Question 15: Which quality assurance method is most commonly applied in monte carlo simulation & var to verify that CRA professional standards are being met?

Relying on client satisfaction surveys as the sole measure of quality
Annual reviews conducted exclusively by non-technical management
Informal self-assessment without external validation
Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in monte carlo simulation & var, providing objective, measurable evidence that CRA standards are consistently met.

Question 16: A bank subject to the Comprehensive Capital Analysis and Review (CCAR) must demonstrate capital adequacy under which type of scenario?

Base case economic scenario only
Adverse and severely adverse stress scenarios (Correct answer)
Management's internal stress test only
Historical worst-case scenario over 10 years

Correct answer: Adverse and severely adverse stress scenarios

CCAR requires large bank holding companies to demonstrate they can maintain adequate capital under both adverse and severely adverse macroeconomic stress scenarios defined by the Fed.

Question 17: In the context of emerging & geopolitical risks, what role does continuous professional development play for CRA practitioners?

It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit
It is optional and only needed for career advancement
It is required only during the first year of certification

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in emerging & geopolitical risks because it ensures CRA practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 18: A risk analyst recommends accepting a residual risk after controls are applied. This decision is appropriate when:

The risk has not yet been formally documented
The cost of further mitigation exceeds the expected benefit of additional risk reduction (Correct answer)
The residual risk exceeds the organization's risk appetite
Stakeholders have not been informed of the residual exposure

Correct answer: The cost of further mitigation exceeds the expected benefit of additional risk reduction

Residual risk acceptance is justified when the marginal cost of additional controls outweighs the marginal reduction in expected loss, reflecting economic efficiency in risk management.

Question 19: In the context of risk appetite & tolerance frameworks, what role does continuous professional development play for CRA practitioners?

It serves primarily as a networking opportunity with no practical benefit
It is required only during the first year of certification
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It is optional and only needed for career advancement

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in risk appetite & tolerance frameworks because it ensures CRA practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 20: In risk communication, the BLUF (Bottom Line Up Front) technique is used to:

Avoid mentioning uncertainty or confidence levels
Present all data equally without prioritization
Lead with the most critical conclusion or recommendation before supporting details (Correct answer)
Bury the key risk finding at the end of a lengthy report

Correct answer: Lead with the most critical conclusion or recommendation before supporting details

BLUF communication starts with the key message or recommendation, allowing busy executives to grasp the critical point immediately before reading supporting details.

Question 21: The Dodd-Frank Act's Collins Amendment requires that U.S. bank capital standards may not be set:

Higher than international Basel standards
Lower than the generally applicable risk-based capital requirements (Correct answer)
Without Federal Reserve approval for any change
Above a Tier 1 ratio of 10%

Correct answer: Lower than the generally applicable risk-based capital requirements

The Collins Amendment establishes a floor ensuring that capital requirements under advanced approaches cannot fall below standardized approach minimums.

Question 22: Expected Shortfall (ES) at the 99% confidence level is best described as:

The average loss in the worst 1% of scenarios (Correct answer)
The median loss across all simulation paths
The maximum loss observed in 1% of scenarios
The loss at exactly the 99th percentile

Correct answer: The average loss in the worst 1% of scenarios

ES (also called CVaR) is the conditional expectation of losses given that the loss exceeds the VaR threshold — i.e., the average of the worst 1% of outcomes.

Question 23: Risk culture within an organization is best defined as:

The formal risk policy documents approved by the board
The shared values, attitudes, and behaviors that shape how risk is identified and managed (Correct answer)
The regulatory compliance checklist followed by audit
The technical risk measurement models used by the risk team

Correct answer: The shared values, attitudes, and behaviors that shape how risk is identified and managed

Risk culture encompasses the organization's collective mindset, norms, and behaviors around risk-taking and management, influencing decisions at every level.

Question 24: A manufacturing firm installs fire sprinklers and trains staff in evacuation procedures. In risk management terminology, sprinklers are BEST classified as a control, while evacuation training is a control.

Preventive; corrective (Correct answer)
Detective; preventive
Corrective; detective
Compensating; directive

Correct answer: Preventive; corrective

Sprinklers mitigate the impact of a fire once it starts (corrective/mitigating), while evacuation training addresses response after the event—however, standard classification treats sprinklers as preventive (limit spread) and evacuation as corrective response; the best-fit pairing here is preventive for sprinklers and corrective for evacuation.

Question 25: A risk analyst applies the 'minimax regret' criterion when evaluating strategies under uncertainty. This approach selects the option that:

Minimizes the maximum regret (opportunity loss) across all possible scenarios (Correct answer)
Avoids all scenarios with any negative outcome
Chooses the strategy with the highest expected monetary value
Maximizes the worst-case outcome

Correct answer: Minimizes the maximum regret (opportunity loss) across all possible scenarios

Minimax regret selects the strategy whose worst-case 'regret'—the gap between the chosen outcome and the best possible outcome in that scenario—is the smallest.

Question 26: Under the Sarbanes-Oxley Act, which section specifically requires CEOs and CFOs to certify the accuracy of financial reports?

Section 201
Section 302 (Correct answer)
Section 906
Section 404

Correct answer: Section 302

Section 302 of SOX requires principal executives to personally certify quarterly and annual financial reports filed with the SEC.

Question 27: Which organization publishes the annual Global Risks Report that is widely used as a reference for emerging risk identification?

World Economic Forum (WEF) (Correct answer)
Bank for International Settlements (BIS)
Organisation for Economic Co-operation and Development (OECD)
International Monetary Fund (IMF)

Correct answer: World Economic Forum (WEF)

The World Economic Forum publishes the annual Global Risks Report, which surveys global leaders to identify and rank the most critical emerging risks across economic, environmental, geopolitical, societal, and technological categories.

Question 28: Which of the following is a fundamental principle of emerging & geopolitical risks as it applies to Certified Risk Analyst?

Systematic evaluation and adherence to established industry standards (Correct answer)
Relying solely on personal experience without reference to guidelines
Avoiding documentation to streamline workflow efficiency
Prioritizing speed of completion over accuracy and compliance

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of emerging & geopolitical risks in Certified Risk Analyst is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 29: Which role does communication play in risk mitigation?

Reduces documentation
Aligns teams on mitigation strategies (Correct answer)
Slows decision-making
Spreads confusion

Correct answer: Aligns teams on mitigation strategies

Effective communication is paramount in risk mitigation as it ensures that all stakeholders are fully aware of identified risks, their potential impacts, and the chosen strategies to address them. Clear and consistent communication fosters alignment among teams, preventing misunderstandings and ensuring everyone is working collaboratively towards common risk management goals. This shared understanding is crucial for successful implementation of mitigation plans.

Question 30: The term 'gray rhino' in geopolitical risk analysis refers to:

A demographic-driven economic slowdown
A highly probable but neglected large-scale threat (Correct answer)
An unpredictable black swan event
A covert state-sponsored cyber attack

Correct answer: A highly probable but neglected large-scale threat

A 'gray rhino' is a high-probability, high-impact threat that is visible and well-known yet tends to be ignored or underestimated until it charges.

Question 31: Which method supports data-driven decision-making?

Role play
Brainstorming
SWOT analysis (Correct answer)
Status meeting

Correct answer: SWOT analysis

SWOT analysis (Strengths, Weaknesses, Opportunities, Threats) is a strategic planning tool that helps organizations systematically identify internal and external factors relevant to their goals. By analyzing these elements, it provides a structured framework for gathering and interpreting data, thereby supporting informed, data-driven decision-making. This comprehensive view helps in understanding an organization's current position and potential risks.

Question 32: Which quality assurance method is most commonly applied in erm & coso framework to verify that CRA professional standards are being met?

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)
Relying on client satisfaction surveys as the sole measure of quality
Annual reviews conducted exclusively by non-technical management
Informal self-assessment without external validation

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in erm & coso framework, providing objective, measurable evidence that CRA standards are consistently met.

Question 33: A bank's internal model back-test produces 12 exceptions over 250 trading days at 99% VaR. Under Basel traffic light rules, which zone does this fall into?

Orange zone (model rejected pending review)
Red zone (capital multiplier increase required) (Correct answer)
Yellow zone (monitoring required)
Green zone (model accepted)

Correct answer: Red zone (capital multiplier increase required)

Basel traffic light rules place 10 or more exceptions in the red zone, triggering mandatory increases to the capital multiplier for market risk.

Question 34: Under COSO ERM 2017, which of the five components is most directly concerned with how risk appetite is communicated throughout the organization?

Governance and Culture
Information, Communication, and Reporting (Correct answer)
Review and Revision
Risk Assessment

Correct answer: Information, Communication, and Reporting

Information, Communication, and Reporting ensures risk appetite and risk-related data flow across all levels of the organization.

Question 35: What is risk transference?

Ignoring the risk
Accepting the risk fully
Avoiding the risk
Outsourcing or insuring against the risk (Correct answer)

Correct answer: Outsourcing or insuring against the risk

Risk transference is a strategy where the financial responsibility or consequences of a risk are shifted to a third party. This is most commonly achieved through purchasing insurance, where an insurer agrees to cover potential losses, or by outsourcing a risky activity to another entity. The goal is to offload the burden of a potential loss to someone else.

Question 36: Which communication practice is most effective for a CRA communicating risk findings to a non-technical executive audience?

Sharing only quantitative data without contextual interpretation
Providing complete mathematical derivations of risk models
Translating complex risk metrics into business impact using plain language and visuals (Correct answer)
Presenting raw statistical outputs and confidence intervals

Correct answer: Translating complex risk metrics into business impact using plain language and visuals

Effective risk communication to executives requires simplifying technical findings into clear business language that highlights impact, likelihood, and recommended actions.

Question 37: The 'resource curse' hypothesis suggests that countries rich in natural resources often experience:

Greater currency stability due to commodity export revenues
Weaker governance, conflict risk, and slower long-term growth (Correct answer)
Higher foreign direct investment and stronger rule of law
Faster economic diversification and institutional development

Correct answer: Weaker governance, conflict risk, and slower long-term growth

The resource curse describes how abundant natural resource wealth often leads to rent-seeking behavior, institutional corruption, conflict over resource revenues, and neglect of economic diversification.

Question 38: What is the primary ethical obligation of a CRA professional when a conflict of interest arises during regulatory capital requirements activities?

Ignore the conflict if it does not directly affect the current task
Proceed while favoring the outcome that benefits the professional personally
Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Resolve the conflict privately without informing stakeholders

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in regulatory capital requirements is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 39: Which behavioral bias can lead risk managers to underreport risk findings when communicating upward?

Availability heuristic
Organizational silence or 'shoot the messenger' culture (Correct answer)
Overconfidence bias
Anchoring bias

Correct answer: Organizational silence or 'shoot the messenger' culture

Organizational silence — where employees fear negative consequences for raising bad news — is a major cultural barrier to effective upward risk communication.

Question 40: A 'risk champion' within an organization's business unit primarily serves to:

Replace the risk management department for that unit
Approve all risk-taking decisions within the unit
Conduct independent audits of risk controls
Promote risk awareness and act as a liaison between the business and risk function (Correct answer)

Correct answer: Promote risk awareness and act as a liaison between the business and risk function

Risk champions embed risk awareness in their business unit, bridging the gap between frontline staff and the centralized risk management function.

Question 41: What is the primary ethical obligation of a CRA professional when a conflict of interest arises during risk appetite & tolerance frameworks activities?

Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Ignore the conflict if it does not directly affect the current task
Proceed while favoring the outcome that benefits the professional personally
Resolve the conflict privately without informing stakeholders

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in risk appetite & tolerance frameworks is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 42: A pharmaceutical company relies on APIs (Active Pharmaceutical Ingredients) sourced exclusively from a country now subject to geopolitical tensions with the U.S. The MOST effective long-term risk mitigation strategy is:

Lobbying for diplomatic resolution of the geopolitical tensions
Diversifying the supplier base across multiple geopolitically stable countries (Correct answer)
Purchasing political risk insurance to cover API supply disruptions
Purchasing larger inventory buffers to delay the impact of supply disruption

Correct answer: Diversifying the supplier base across multiple geopolitically stable countries

Geographic supplier diversification addresses the root cause of concentration risk by eliminating single-country dependence, providing resilience against geopolitically motivated supply disruptions.

Question 43: Under market risk capital rules, Value-at-Risk (VaR) for regulatory capital must be calculated at what confidence level and holding period?

99% confidence, 10-day holding period (Correct answer)
99.9% confidence, 1-day holding period
95% confidence, 1-day holding period
95% confidence, 10-day holding period

Correct answer: 99% confidence, 10-day holding period

Regulatory VaR for market risk capital is calculated at 99% confidence over a 10-day holding period under the standardized and internal models approaches.

Question 44: The 'Three Lines of Defense' model assigns risk management responsibility in which structure?

Business Units → Risk/Compliance Functions → Internal Audit (Correct answer)
Board → CEO → Employees
External Audit → Regulators → Senior Management
Legal → Operations → Finance

Correct answer: Business Units → Risk/Compliance Functions → Internal Audit

The Three Lines of Defense model has business units (1st line) owning risk, risk and compliance functions (2nd line) providing oversight, and internal audit (3rd line) providing independent assurance.

Question 45: Which of the following describes 'model risk' specific to Monte Carlo VaR?

The risk that the simulation takes too long to run
The risk that actual trading losses exceed VaR too frequently
The risk of correlated random number generators
The risk that incorrect distributional or parameter assumptions produce misleading risk estimates (Correct answer)

Correct answer: The risk that incorrect distributional or parameter assumptions produce misleading risk estimates

Model risk in Monte Carlo VaR arises from incorrect assumptions about return distributions, volatility processes, or correlations, which can systematically under- or overstate true risk.

Question 46: Under the advanced measurement approach (AMA) for operational risk, banks must capture losses at a confidence level of:

99% over a one-year horizon
99.9% over a one-year horizon (Correct answer)
95% over a one-year horizon
99.99% over a one-year horizon

Correct answer: 99.9% over a one-year horizon

The AMA requires banks to estimate operational risk capital at a 99.9% confidence level over a one-year holding period.

Question 47: A risk analyst presenting findings to regulators should prioritize which communication approach?

Withholding model assumptions to protect proprietary methodologies
Emphasizing only positive risk outcomes to maintain confidence
Presenting only data that supports the desired regulatory outcome
Providing transparent, accurate, and complete risk disclosures including limitations and uncertainties (Correct answer)

Correct answer: Providing transparent, accurate, and complete risk disclosures including limitations and uncertainties

Regulatory communications require full transparency, including disclosure of model limitations, data gaps, and uncertainties, to maintain regulatory trust and compliance.

Question 48: What is a limitation of financial models?

They always predict exact outcomes
They work better without data
They rely on assumptions and past data (Correct answer)
They require too much paper

Correct answer: They rely on assumptions and past data

Financial models are inherently limited because they are built upon a set of assumptions about future conditions and rely heavily on historical data, which may not always be indicative of future performance. These underlying assumptions and data limitations can lead to inaccuracies if market conditions or relationships change unexpectedly.

Question 49: A company's risk committee reviews a project with a positive NPV but a tail risk scenario that could cause insolvency. The committee rejects the project. This decision BEST reflects:

Applying a risk constraint that protects organizational survival over pure expected-value optimization (Correct answer)
Ignoring shareholder return requirements
Over-application of the precautionary principle in a low-stakes context
Maximizing expected monetary value

Correct answer: Applying a risk constraint that protects organizational survival over pure expected-value optimization

Protecting the firm from ruin risk means accepting a lower expected return to avoid scenarios that threaten solvency, a principle central to enterprise risk management.

Question 50: The term 'polycrisis' in global risk management refers to:

Multiple simultaneous crises that interact and amplify each other's impact (Correct answer)
A crisis that spans more than three countries simultaneously
A recurring cyclical risk pattern driven by political election cycles
A single catastrophic event with multiple sequential consequences

Correct answer: Multiple simultaneous crises that interact and amplify each other's impact

A polycrisis occurs when several distinct crises interact simultaneously, such that their combined effect is greater than the sum of individual crises, creating compounding and unpredictable systemic effects.

Certified Risk Analyst (CRA)

The AIBM Certified Risk Analyst (CRA) credential validates expertise in risk analysis principles, assessment methodologies, and mitigation strategies. It covers regulatory compliance, decision support, and emerging trends across enterprise risk management frameworks.

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds