CRO Cheat Sheet 2026

The 30 highest-yield CRO facts, distilled from real exam questions. Print it, save it as a PDF, or study it here — free, no sign-up.

1. What is credit risk? → Risk of borrower default
2. How can organizations evaluate their crisis readiness? → Conduct regular drills and scenario-based testing
3. Which of the following BEST describes 'contingent liquidity risk'? → Liquidity risk arising from contractually committed but undrawn credit lines
4. Which behavior BEST demonstrates that middle management has internalized strong risk culture? → Proactively identifying and escalating risks before they become incidents
5. The concept of 'tone at the top' in risk management means: → Senior executives publicly model and reinforce desired risk behaviors and values
6. Which metric is MOST useful for assessing the effectiveness of risk culture communication initiatives? → Change in the rate of voluntary risk event reporting over time
7. A CRO is onboarding a newly acquired subsidiary with a weak risk culture. The recommended FIRST step is to: → Conduct a risk culture diagnostic assessment to identify specific gaps and starting points
8. A CRO wants to quantify the risk that two risks materialize simultaneously. Which technique is MOST appropriate? → Copula models to capture joint probability distributions and tail dependence
9. A correlation coefficient of +1.0 between two asset classes in a risk model implies: → The assets always move perfectly together in the same direction
10. Which of the following funding sources is MOST stable for liquidity management purposes? → Retail deposits with established customer relationships
11. In the context of CRO certification, what is the most important consideration when implementing third-party risk assessment? → Ensuring alignment with established standards, stakeholder needs, and best practices
12. A Chief Risk Officer seeking to strengthen risk culture should FIRST focus on: → Securing executive sponsorship and board-level commitment to risk culture
13. In the three lines of defense model, where does the Chief Risk Officer's function primarily reside? → Second line — risk oversight and policy setting
14. Which of the following is a type of financial risk? → Market risk
15. Which tool is commonly used for assessing financial risk? → Value-at-Risk (VaR)
16. Which of the following best describes 'risk tolerance'? → The acceptable deviation from risk appetite
17. Which metric is used to evaluate a firm’s liquidity risk? → Current ratio
18. In a risk-aware culture, how should employees be encouraged to view risk? → As part of normal business activity requiring informed, balanced management
19. What financial instruments can be used to hedge market risks? → Futures and options
20. When a quantitative risk model consistently underestimates losses during periods of market stress, this is MOST likely caused by: → Assuming linear correlations that break down during crises due to contagion effects
21. What is a 'liquidity buffer' in risk management? → A reserve of liquid assets held to cover unexpected cash outflows
22. Who is typically responsible for overseeing ERM within an organization? → Chief Risk Officer
23. Which of the following best describes a key competency required for emerging risk identification in CRO practice? → Strong analytical skills combined with effective communication and ethical judgment
24. Which element is essential in crisis recovery planning? → Defined roles and quick decision-making processes
25. Why is leadership important during a crisis? → To provide direction, support, and quick responses during turmoil
26. Which of the following is classified as a High-Quality Liquid Asset (HQLA) under Basel III? → Government securities issued by sovereign entities with low default risk
27. A CRO notices that front-line managers consistently override risk controls. This MOST likely indicates: → Controls are too complex and not integrated into daily workflows
28. What is the main purpose of corporate compliance programs? → To promote ethical behavior and prevent violations
29. In the context of CRO certification, what is the most important consideration when implementing risk reporting & dashboards? → Ensuring alignment with established standards, stakeholder needs, and best practices
30. Market liquidity risk is BEST described as: → The risk that an asset cannot be sold quickly without significantly impacting its price