CRO Study Guide 2026
Everything you need to pass the CRO exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 CRO Exam Format at a Glance
📚 CRO Topics to Study (69)
✍️ Sample CRO Questions & Answers
1. Which standard provides a globally recognized framework specifically for information security controls that is commonly used to evaluate third-party vendors?
ISO/IEC 27001 is the international standard for information security management systems and is widely used to evaluate vendor security posture.
2. A CRO reviews a model that consistently underestimates losses during market stress. This is an example of which risk?
Model risk is the risk of loss due to errors or limitations in financial models, including systematic underestimation of tail losses.
3. How can stress testing support financial risk management?
Stress testing is a critical risk management technique that assesses the resilience of an organization's financial position under extreme, yet plausible, adverse market conditions or economic scenarios. It helps identify vulnerabilities and potential losses that might not be apparent under normal operating conditions, informing capital planning and risk mitigation strategies.
4. In operational resilience, what does 'impact tolerance' represent?
Impact tolerance sets the outer boundary of disruption a firm can absorb before harm to customers or the financial system becomes intolerable.
5. Under IFRS 9, what triggers a transfer from Stage 1 to Stage 2 for a financial asset?
Stage 2 under IFRS 9 is triggered by a significant increase in credit risk (SICR) relative to origination, requiring lifetime expected credit loss provisioning.
6. Which principle should guide the selection of KRIs included in an executive risk dashboard?
KRIs on executive dashboards should map directly to risk appetite statements so leaders can immediately gauge whether the firm is within tolerance.