RIMS-CRMP: Certified Risk Management Professional — Questions and Answers

Question 1: During a risk advisory engagement, a client requests that the advisor keep certain sensitive financial data confidential from their own board of directors. How should the advisor respond?

Decline to withhold material risk information from governance bodies, as this conflicts with professional ethics and fiduciary responsibility (Correct answer)
Redact all financial data from risk reports as a standard practice
Agree to the request to maintain the client relationship and billing arrangement
Provide the information only if the board formally requests it in writing

Correct answer: Decline to withhold material risk information from governance bodies, as this conflicts with professional ethics and fiduciary responsibility

A risk advisor must maintain professional integrity and cannot suppress material risk information from oversight bodies; doing so would breach ethical standards and potentially enable harm to the organization.

Question 2: Which federal law primarily governs the privacy of health information and directly impacts how risk managers handle employee benefits data?

ADA
FCRA
ERISA
HIPAA (Correct answer)

Correct answer: HIPAA

HIPAA (Health Insurance Portability and Accountability Act) sets national standards for protecting individually identifiable health information.

Question 3: During a client consultation, the advisor discovers the client's current property coverage has a co-insurance clause of 80%. The insured value is $4M but the property is worth $10M. If a $2M loss occurs, what is the primary advisory concern?

The insurer will cancel the policy upon discovering the undervaluation
The client will receive only a fraction of the loss due to co-insurance penalty (Correct answer)
The client should switch to a blanket policy immediately
The deductible is too high to make a claim worthwhile

Correct answer: The client will receive only a fraction of the loss due to co-insurance penalty

Because the insured value ($4M) is below the required 80% of actual value ($8M), the co-insurance formula will reduce the claim payout significantly below the actual $2M loss.

Question 4: Under OSHA regulations, employers are required to report work-related fatalities to OSHA within:

5 business days
8 hours (Correct answer)
24 hours
72 hours

Correct answer: 8 hours

OSHA requires employers to report any work-related fatality within 8 hours of learning about it.

Question 5: A risk advisor helps a client negotiate manuscript policy language. What is the PRIMARY advantage of manuscript coverage over standard form policies?

Manuscript language can be customized to address the client's unique exposures not covered by standard forms (Correct answer)
Manuscript policies eliminate the insurer's right to subrogation
Manuscript policies are always cheaper because they exclude standard terms
Manuscript coverage is only available to Fortune 500 companies

Correct answer: Manuscript language can be customized to address the client's unique exposures not covered by standard forms

Manuscript policies are custom-drafted to address specific exposures, operations, or contractual requirements that standard ISO or AAIS forms do not adequately cover.

Question 6: Which of the following scenarios best illustrates the concept of 'residual risk'?

A company buys a comprehensive insurance policy eliminating all risk
A company avoids a market by not entering it at all
A company installs fire suppression but still faces a small residual chance of fire loss (Correct answer)
A company transfers 100% of its cyber risk to an insurer

Correct answer: A company installs fire suppression but still faces a small residual chance of fire loss

Residual risk is the risk remaining after controls have been applied; even with fire suppression, some fire loss potential remains.

Question 7: Which scenario represents a clear violation of professional objectivity in risk management?

Selecting an insurer owned by a family member without disclosure (Correct answer)
Using quantitative models to assess risk severity
Consulting with peers before finalizing a risk recommendation
Recommending a risk transfer strategy based on cost analysis

Correct answer: Selecting an insurer owned by a family member without disclosure

Selecting a vendor with an undisclosed personal financial relationship is a conflict of interest that violates professional objectivity.

Question 8: Under the Sarbanes-Oxley Act (SOX), which section specifically requires CEOs and CFOs to certify the accuracy of financial reports?

Section 906
Section 101
Section 404
Section 302 (Correct answer)

Correct answer: Section 302

SOX Section 302 requires CEOs and CFOs to personally certify the accuracy and completeness of financial disclosures in periodic reports.

Question 9: When conducting a business impact analysis (BIA), the primary objective is to:

Calculate premium savings from risk transfer arrangements
Evaluate competitor risk management practices
Identify critical business functions and quantify the impact of their disruption (Correct answer)
Determine the market value of insurable assets

Correct answer: Identify critical business functions and quantify the impact of their disruption

A BIA identifies which business processes are most critical and estimates the financial and operational consequences of their interruption.

Question 10: Which regulatory framework requires financial institutions to implement anti-money laundering (AML) programs and file Suspicious Activity Reports (SARs)?

Bank Secrecy Act (Correct answer)
USA PATRIOT Act
Community Reinvestment Act
Gramm-Leach-Bliley Act

Correct answer: Bank Secrecy Act

The Bank Secrecy Act (BSA) requires financial institutions to establish AML programs and report suspicious transactions through Suspicious Activity Reports.

Question 11: How should strategic objectives be defined?

Based solely on competitor benchmarks
Without specific timelines to maintain flexibility
As broad aspirational statements
Using SMART criteria: Specific, Measurable, Achievable, Relevant, Time-bound (Correct answer)

Correct answer: Using SMART criteria: Specific, Measurable, Achievable, Relevant, Time-bound

SMART criteria ensure objectives are clear, trackable, realistic, aligned with mission, and time-bound, enabling effective implementation and evaluation.

Question 12: A client's risk advisor is presenting recommendations to the board of directors. What is the MOST effective way to structure the presentation for board-level stakeholders?

Present every risk in alphabetical order with equal emphasis on each
Lead with detailed policy endorsements and underwriting questionnaires
Limit the presentation to loss run data from the past ten years
Open with strategic risk context and financial impact, then summarize key decisions needed from the board (Correct answer)

Correct answer: Open with strategic risk context and financial impact, then summarize key decisions needed from the board

Board presentations are most effective when they begin with strategic context and material financial implications, then narrow to the specific decisions or approvals required from directors.

Question 13: An organization's risk manager is asked by senior management to omit a material risk from the annual report to avoid alarming investors. The MOST ethical response is to:

Include the risk but use technical language that obscures its significance
Refuse and explain that omitting material risks violates SEC disclosure requirements (Correct answer)
Comply since senior management has authority over disclosures
Resign rather than confront management on the issue

Correct answer: Refuse and explain that omitting material risks violates SEC disclosure requirements

Risk managers have an ethical and legal obligation to ensure material risks are properly disclosed; complying with management's request could constitute securities fraud.

Question 14: In enterprise risk portfolio strategy, 'emerging risks' are challenging to manage primarily because they:

Are typically low-severity and thus unimportant to portfolio strategy
Are always excluded from commercial insurance policies
Are already well-documented with extensive actuarial loss history
Lack historical data, making likelihood and impact assessment highly uncertain (Correct answer)

Correct answer: Lack historical data, making likelihood and impact assessment highly uncertain

Emerging risks lack credible historical loss data, making them difficult to quantify, price, and strategically position within a risk portfolio.

Question 15: What is the purpose of regular client reviews?

To reduce the number of active clients
To meet quota requirements
To reassess needs, evaluate progress, and adjust strategies as circumstances change (Correct answer)
To sell additional services

Correct answer: To reassess needs, evaluate progress, and adjust strategies as circumstances change

Regular reviews ensure strategies remain aligned with evolving client needs and circumstances, demonstrating proactive service and building long-term relationships.

Question 16: The Affordable Care Act's employer mandate (Section 4980H) penalizes applicable large employers (ALEs) that fail to offer minimum essential coverage to:

Employees working more than 35 hours per week under collective bargaining agreements
All employees working more than 20 hours per week
Full-time employees working 30 or more hours per week (Correct answer)
All W-2 employees regardless of hours worked

Correct answer: Full-time employees working 30 or more hours per week

ALEs must offer minimum essential coverage to full-time employees defined as those working 30 or more hours per week or 130 hours per month or face potential penalties.

Question 17: Under OSHA's recordkeeping rule (29 CFR 1904), how long must employers retain OSHA 300 Logs?

10 years
3 years
5 years (Correct answer)
1 year

Correct answer: 5 years

OSHA requires employers to retain the OSHA 300 Log, 300A Summary, and 301 Incident Reports for five years following the end of the calendar year they cover.

Question 18: Why is maintaining professional boundaries important in client relationships?

It creates distance that clients prefer
It reduces the quality of service
It ensures objectivity and protects both the professional and the client (Correct answer)
It is only important for new client relationships

Correct answer: It ensures objectivity and protects both the professional and the client

Professional boundaries maintain objectivity in recommendations, prevent conflicts of interest, and protect both parties from inappropriate dependencies or expectations.

Question 19: The 'absolute pollution exclusion' found in most modern CGL policies excludes coverage for bodily injury or property damage arising from:

The discharge, dispersal, seepage, or release of pollutants in virtually all circumstances (Correct answer)
Pollution on third-party sites but not on the insured's own premises
Noise and vibration caused by construction equipment only
Pollution claims that are fully remediated within 72 hours

Correct answer: The discharge, dispersal, seepage, or release of pollutants in virtually all circumstances

The absolute pollution exclusion broadly bars coverage for harm resulting from the release of pollutants, with very limited exceptions depending on the policy form.

Question 20: The concept of 'risk interdependency' is important in risk identification because:

It ensures each risk is owned by a separate department
It mandates that risks be ranked independently of each other
It helps identify how one risk event can trigger or amplify other risks (Correct answer)
It requires all risks to be quantified in financial terms

Correct answer: It helps identify how one risk event can trigger or amplify other risks

Risk interdependencies reveal how risks are connected, allowing organizations to understand cascading effects and systemic vulnerabilities.

Question 21: A risk manager discovers their company's captive insurer is not licensed in the state where most claims originate. What is the PRIMARY compliance concern?

ERISA preemption issues
Federal antitrust violations
SEC registration requirements
Unauthorized insurance transaction exposure under state law (Correct answer)

Correct answer: Unauthorized insurance transaction exposure under state law

Conducting insurance transactions in a state without proper licensure constitutes unauthorized insurance and exposes the company to regulatory penalties.

Question 22: Which risk identification method involves tracing an accident backward from its outcome to identify all contributing causes?

Fault tree analysis (Correct answer)
Failure mode and effects analysis
What-if analysis
Hazard and operability study (HAZOP)

Correct answer: Fault tree analysis

Fault tree analysis starts with an undesired event and works backward using logic gates to identify all possible causes and contributing factors.

Question 23: A client's risk advisor recommends increasing their self-insured retention (SIR). Which financial condition BEST supports this recommendation?

The client's loss history shows frequent large catastrophic claims
The client has high leverage and limited liquidity to absorb unexpected losses
The client has strong cash flow, low debt, and the ability to fund moderate retained losses (Correct answer)
The client's board has mandated zero risk tolerance across all lines

Correct answer: The client has strong cash flow, low debt, and the ability to fund moderate retained losses

A higher SIR is appropriate when the client has the financial capacity (strong cash flow, low leverage) to absorb retained losses, thereby reducing premium costs on the insured layer.

Question 24: Which risk portfolio strategy concept refers to transferring peak-level losses while retaining moderate, expected losses within the organization?

First-dollar coverage
Blanket coverage
Named-peril policy
Excess of loss (XL) structure (Correct answer)

Correct answer: Excess of loss (XL) structure

An excess of loss structure has the insurer cover losses above a defined retention (attachment point), while the organization retains routine expected losses below that threshold.

Question 25: What is the appropriate retention period for professional records?

One year after the last service
Until storage space runs out
As specified by state/federal law and professional licensing requirements (Correct answer)
Only as long as the client remains active

Correct answer: As specified by state/federal law and professional licensing requirements

Record retention must follow state/federal laws and professional licensing requirements, which typically specify minimum retention periods for different record types.

Question 26: Which approach is used to convert nominal loss amounts to constant dollars when analyzing multi-year loss data?

Calculating the pure premium
Applying a loading factor
Trend analysis using price or wage indices (Correct answer)
Applying loss development factors

Correct answer: Trend analysis using price or wage indices

Trend factors derived from price or wage indices adjust historical losses to a common dollar base, removing the effect of economic inflation.

Question 27: A client asks their risk advisor to help prioritize risks using a heat map. What does a heat map primarily plot?

Premium cost versus deductible size for each risk
Number of claims versus average claim duration
Likelihood of occurrence versus potential severity of impact (Correct answer)
Geographic distribution of insured assets versus catastrophe zones

Correct answer: Likelihood of occurrence versus potential severity of impact

A risk heat map plots probability (likelihood) on one axis and impact (severity) on the other to help visually prioritize which risks demand the most attention.

Question 28: Under RIMS ethical guidelines, confidential risk information obtained during professional duties may be disclosed when:

Colleagues request it for peer benchmarking
The information is more than two years old
Disclosure would benefit the industry broadly
Required by law or authorized by the client/employer (Correct answer)

Correct answer: Required by law or authorized by the client/employer

Confidentiality obligations can only be overridden by legal requirements or explicit authorization from the party to whom the duty is owed.

Question 29: During a risk consultation, a client discloses information suggesting potential fraud within their own organization. What is the risk advisor's primary obligation?

Immediately report the information to the client's insurer to protect policy validity
Advise the client to disclose the matter to appropriate internal governance and legal counsel (Correct answer)
Contact law enforcement directly without informing the client
Keep the information confidential under client privilege and take no action

Correct answer: Advise the client to disclose the matter to appropriate internal governance and legal counsel

The advisor's primary obligation is to direct the client to appropriate internal governance channels (audit committee, legal counsel) so the matter is handled through proper procedures while respecting professional boundaries.

Question 30: Why is regulatory compliance important in risk management?

To monitor market trends (Correct answer)
To ensure legal operation and promote ethical practices
To track employee performance
To reduce operational costs

Correct answer: To monitor market trends

Regulatory compliance often mandates specific reporting requirements, particularly in industries like finance or environmental management. These regulations compel organizations to collect and disclose data that, when aggregated and analyzed, can provide insights into broader market trends, emerging risks, and competitive landscapes. Therefore, adhering to these reporting regulations indirectly contributes to an organization's ability to monitor and respond to market dynamics as part of its overall risk management strategy.

Question 31: Which factor is MOST critical when an organization selects a captive domicile?

The size of the domicile's domestic insurance market
Proximity of the domicile to the parent's corporate headquarters
Whether the domicile has a bilateral tax treaty with the U.S.
The domicile's regulatory environment, capital requirements, and tax treatment (Correct answer)

Correct answer: The domicile's regulatory environment, capital requirements, and tax treatment

Captive domicile selection centers on the regulatory framework, minimum capital requirements, reporting obligations, and tax efficiency of the jurisdiction.

Question 32: What constitutes a boundary violation in professional practice?

Attending continuing education events
Engaging in dual relationships that could impair professional judgment (Correct answer)
Following organizational policies
Maintaining strict professional communication

Correct answer: Engaging in dual relationships that could impair professional judgment

Dual relationships that could impair professional judgment represent boundary violations, potentially compromising the quality and objectivity of professional services.

Question 33: Under the RIMS Risk Maturity Model (RMM), an organization at the 'Risk Defined' level typically:

Has fully integrated ERM into strategic decision-making
Has no formal risk management processes in place
Has established formal risk policies and risk appetite statements (Correct answer)
Relies solely on insurance for all risk financing

Correct answer: Has established formal risk policies and risk appetite statements

At the 'Risk Defined' level, formal policies, risk appetite, and basic ERM processes exist but are not yet fully embedded in strategy.

Question 34: A risk manager recommends redesigning a manufacturing process to eliminate employee exposure to a toxic chemical entirely. This strategy is BEST classified as:

Risk transfer
Risk acceptance
Risk avoidance (Correct answer)
Risk reduction

Correct answer: Risk avoidance

Eliminating the hazard entirely by redesigning the process so the toxic chemical is no longer used constitutes risk avoidance — the activity creating the risk no longer exists.

Question 35: In the COSO ERM framework, 'risk response' options include all of the following EXCEPT:

Reduce
Eliminate (Correct answer)
Avoid
Accept

Correct answer: Eliminate

COSO ERM identifies four risk responses: accept, avoid, reduce, and share (transfer) — 'eliminate' is not a listed category because risk can rarely be completely eliminated.

Question 36: Which metric is most useful for measuring the effectiveness of a loss prevention program over time?

Incurred loss trend analysis (Correct answer)
Reinsurance attachment point
Policy deductible level
Gross written premium

Correct answer: Incurred loss trend analysis

Tracking incurred loss trends over time reveals whether prevention efforts are actually reducing the frequency and severity of losses.

Question 37: An insured purchases a $5M per-occurrence limit with a $500,000 self-insured retention (SIR). A loss of $3M occurs. How much does the insured pay?

$2,500,000
$500,000 (Correct answer)
$3,000,000
$0

Correct answer: $500,000

With an SIR, the insured pays the first $500,000 of each occurrence, and the insurer pays the excess up to the policy limit; for a $3M loss, the insured pays $500,000.

Question 38: A client wants to benchmark their insurance program against industry peers. Which data source is MOST useful for obtaining industry-specific loss cost and rate benchmarking information?

Publicly available annual reports of direct competitors
The client's own five-year loss runs only
The client's CFO's personal network of contacts
Industry benchmarking databases such as RIMS Benchmark Survey, Advisen, or insurance market analytics platforms (Correct answer)

Correct answer: Industry benchmarking databases such as RIMS Benchmark Survey, Advisen, or insurance market analytics platforms

Professional benchmarking databases (RIMS Benchmark Survey, Advisen) provide industry-segmented premium rates, coverage structures, and loss cost data that enable meaningful peer comparison for a client's risk program.

Question 39: Which of the following best describes the concept of 'combined ratio' as a market health indicator?

The sum of loss ratio and expense ratio, indicating underwriting profitability (Correct answer)
The ratio of an insurer's investment income to total assets
The proportion of claims paid versus claims denied
The ratio of premium volume to policyholder surplus

Correct answer: The sum of loss ratio and expense ratio, indicating underwriting profitability

A combined ratio below 100% indicates underwriting profit, while above 100% signals underwriting losses, making it a key market health metric.

Question 40: A 'defense within limits' (eroding limits) policy means that:

Defense costs reduce the policy's aggregate and per-occurrence limits (Correct answer)
The insurer has the unlimited duty to defend regardless of policy exhaustion
Defense costs are paid by the insurer in addition to the policy limit
The insured must fund its own defense up to the SIR

Correct answer: Defense costs reduce the policy's aggregate and per-occurrence limits

In a defense-within-limits policy, legal defense expenses count against and erode the available coverage limits, reducing what remains for indemnity.

Question 41: How does risk analysis influence insurance coverage decisions?

By reducing operational costs
By identifying necessary types of coverage based on risks
By tracking market trends (Correct answer)
By increasing profits

Correct answer: By tracking market trends

Risk analysis involves evaluating potential future losses and their impact. By tracking market trends, such as economic shifts, technological advancements, or emerging risks like cyber threats, insurers can better understand the evolving risk landscape. This data allows them to accurately price policies, define coverage terms, and develop new products that effectively address current and future risks, ensuring their offerings remain relevant and profitable.

Question 42: The concept of 'whistleblower protection' under Dodd-Frank allows employees who report securities violations to:

File anonymous complaints without ever being identified
Receive immunity from prosecution for their own violations
Override management decisions on risk disclosures
Receive monetary awards and protection from employer retaliation (Correct answer)

Correct answer: Receive monetary awards and protection from employer retaliation

Dodd-Frank's whistleblower provisions allow qualifying reporters to receive 10-30% of sanctions over $1 million and protect them from employer retaliation.

Question 43: Under the Bank Secrecy Act (BSA) and anti-money laundering (AML) regulations, insurance companies offering certain products must file Suspicious Activity Reports (SARs) for transactions involving:

Foreign premium payments exceeding $10,000 from non-FATF member countries
Any premium payment exceeding $5,000
All cash payments regardless of amount for life insurance products
Transactions of $5,000 or more where money laundering or other illegal activity is suspected (Correct answer)

Correct answer: Transactions of $5,000 or more where money laundering or other illegal activity is suspected

FinCEN requires covered insurance companies to file SARs for transactions of $5,000 or more where the insurer knows, suspects, or has reason to suspect illegal activity.

Question 44: Which risk treatment option is MOST appropriate when the cost of controlling a risk exceeds the potential loss from the risk itself?

Risk avoidance
Risk transfer
Risk acceptance (retention) (Correct answer)
Risk reduction

Correct answer: Risk acceptance (retention)

When control costs exceed potential losses, risk acceptance (retention) is economically rational — the organization consciously decides to absorb the risk rather than overspend on mitigation.

Question 45: Under the EU's General Data Protection Regulation (GDPR), what is the maximum fine for the most serious violations?

€10 million or 2% of global annual turnover, whichever is higher
€50 million regardless of company size
€5 million or 1% of EU revenue, whichever is lower
€20 million or 4% of global annual turnover, whichever is higher (Correct answer)

Correct answer: €20 million or 4% of global annual turnover, whichever is higher

GDPR's most serious violations carry penalties up to €20 million or 4% of total global annual turnover of the preceding year, whichever is higher.

Question 46: A client is reviewing vendor contracts and asks their risk advisor about the implications of an indemnification clause. What is the risk advisor's MOST important advisory point?

Only the other party's insurance carrier needs to review indemnification terms
Indemnification language should always be removed to minimize the client's obligations
Indemnification clauses are unenforceable in commercial contracts and can be ignored
The scope of the indemnification obligation must be matched to adequate contractual liability insurance coverage (Correct answer)

Correct answer: The scope of the indemnification obligation must be matched to adequate contractual liability insurance coverage

When a client accepts broad indemnification obligations, the risk advisor must ensure corresponding insurance coverage (e.g., contractual liability under CGL) is in place to fund those potential obligations.

Question 47: The Nonadmitted and Reinsurance Reform Act (NRRA) of 2010 primarily streamlined which regulatory process?

State licensing requirements for insurance agents
Surplus lines tax collection and regulatory jurisdiction for multi-state risks (Correct answer)
Reinsurance collateral requirements for domestic reinsurers
Workers' compensation rate filings across multiple states

Correct answer: Surplus lines tax collection and regulatory jurisdiction for multi-state risks

NRRA established that only the home state of the insured has regulatory jurisdiction and tax authority over surplus lines transactions for multi-state risks.

Question 48: A risk manager is evaluating whether a contractual indemnification clause is enforceable. Which type of anti-indemnity statute would void a clause requiring one party to indemnify another for the indemnitee's own negligence?

Construction anti-indemnity statutes (Correct answer)
Hold harmless limitation rules
Contribution bar agreements
Comparative fault statutes

Correct answer: Construction anti-indemnity statutes

Construction anti-indemnity statutes, enacted in most states, void contractual provisions that require a subcontractor to indemnify a general contractor for the general contractor's own negligence.

Question 49: In analyzing environmental liability market trends, which regulatory development has most significantly expanded insurer exposure in recent years?

Elimination of strict liability for environmental releases
Relaxation of EPA enforcement standards under recent administrations
Reduction in Superfund site designations nationally
Expanding PFAS (forever chemicals) liability and contamination remediation requirements (Correct answer)

Correct answer: Expanding PFAS (forever chemicals) liability and contamination remediation requirements

PFAS contamination has created widespread environmental liability exposure as regulators establish stricter cleanup standards and enforcement actions increase.

Question 50: What is the foundation of effective client advisory services?

Minimizing time spent with each client
Following a standardized approach for all clients
Understanding client needs, goals, and risk tolerance through thorough discovery (Correct answer)
Recommending the most profitable products

Correct answer: Understanding client needs, goals, and risk tolerance through thorough discovery

Effective advisory begins with thorough discovery of client needs, goals, and risk tolerance, ensuring recommendations are truly aligned with client interests.

Question 51: A risk manager calculates that a single storm could cause $5M in losses with a 2% annual probability. The annual expected loss is:

$250,000
$500,000
$100,000 (Correct answer)
$2,500,000

Correct answer: $100,000

Expected loss = probability × severity = 0.02 × $5,000,000 = $100,000 per year.

Question 52: A client is deciding whether to retain or transfer a specific operational risk. Which analytical framework is MOST appropriate to guide this decision?

Cost-benefit analysis comparing retention costs (expected loss + admin) versus transfer costs (premium) (Correct answer)
Review of competitor insurance purchasing decisions
SWOT analysis of the risk management department
Actuarial reserve calculation for the insurer's pricing model

Correct answer: Cost-benefit analysis comparing retention costs (expected loss + admin) versus transfer costs (premium)

The retain-versus-transfer decision is best guided by comparing the total cost of retention (expected losses plus administration) against the cost of transferring the risk via insurance premium.

Question 53: Emerging risks differ from known risks primarily because they:

Have been accepted as within the organization's risk tolerance
Are still developing and lack sufficient historical data for quantification (Correct answer)
Have occurred multiple times and are well-documented in loss history
Are fully covered by existing insurance policies

Correct answer: Are still developing and lack sufficient historical data for quantification

Emerging risks are novel or evolving threats with limited historical data, making them difficult to quantify using traditional actuarial methods.

Question 54: Which risk control technique involves restructuring operations so that a single event cannot cause a total loss?

Separation of exposures (Correct answer)
Risk avoidance
Risk transfer
Loss prevention

Correct answer: Separation of exposures

Separation of exposures spreads assets or operations across locations so no single event destroys the entire value.

Question 55: A commercial property policy contains a coinsurance clause requiring 80% coverage. If a building worth $1,000,000 is insured for only $600,000 and suffers a $200,000 loss, how much will the insurer pay?

$150,000 (Correct answer)
$120,000
$160,000
$200,000

Correct answer: $150,000

Using the coinsurance formula: ($600,000 / $800,000) × $200,000 = $150,000.

Question 56: A client operating in a high-crime urban area wants to address employee dishonesty risk. Which coverage is specifically designed to protect against losses caused by fraudulent acts of employees?

Commercial Crime / Fidelity Bond coverage (Correct answer)
Directors and Officers (D&O) liability insurance
Umbrella excess liability policy
Commercial General Liability (CGL) with employment practices endorsement

Correct answer: Commercial Crime / Fidelity Bond coverage

Commercial crime/fidelity coverage (including employee dishonesty bonds) is specifically designed to indemnify an employer for direct financial losses caused by dishonest or fraudulent acts of employees.

Question 57: Why is it important to maintain documentation of risk management processes?

To increase sales
To monitor employee performance (Correct answer)
To demonstrate compliance, aid in audits, and show due diligence
To track market trends

Correct answer: To monitor employee performance

Maintaining documentation of risk management processes provides a clear record of how risks are identified, assessed, mitigated, and monitored within an organization. While its core purpose is to demonstrate compliance and provide an audit trail, this documentation can also serve as a reference for evaluating the effectiveness of risk management activities. By reviewing documented processes and outcomes, management can assess whether employees are following established protocols and performing their risk management duties effectively, thus indirectly monitoring their performance in this critical area.

Question 58: When constructing a risk portfolio strategy, 'correlation' between risks is important because:

Correlation determines the premium charged by insurers
Highly correlated risks can compound losses when multiple events occur simultaneously (Correct answer)
Uncorrelated risks must always be transferred to third parties
Correlated risks cancel each other out, reducing total exposure

Correct answer: Highly correlated risks can compound losses when multiple events occur simultaneously

Highly correlated risks tend to materialize together, meaning simultaneous losses can exceed what independent analysis of each risk would suggest.

Question 59: Which economic indicator is most useful for predicting changes in workers' compensation exposure when analyzing insurance market trends?

Consumer Price Index (CPI)
Federal funds interest rate
S&P 500 index performance
Employment rates and payroll data (Correct answer)

Correct answer: Employment rates and payroll data

Workers' compensation exposure is directly tied to payroll and employment levels, making payroll data the most relevant economic indicator.

Question 60: A risk advisor is conducting a stakeholder interview as part of a risk assessment. What is the PRIMARY purpose of these interviews?

To gather qualitative insights on emerging risks and risk culture that quantitative data may not capture (Correct answer)
To negotiate lower insurance premiums with the underwriter
To satisfy ISO 31000 documentation requirements for the client
To replace the need for loss run analysis from insurers

Correct answer: To gather qualitative insights on emerging risks and risk culture that quantitative data may not capture

Stakeholder interviews surface qualitative intelligence—risk culture, emerging concerns, and operational nuances—that historical loss data and quantitative models often cannot reveal.

Question 61: A risk manager benchmarks the organization's TCOR against industry peers primarily to:

Justify higher insurance premiums to the board
Eliminate the need for actuarial analysis
Identify whether the current risk portfolio strategy is cost-effective relative to comparable organizations (Correct answer)
Determine which business units should be divested

Correct answer: Identify whether the current risk portfolio strategy is cost-effective relative to comparable organizations

Benchmarking TCOR against peers reveals whether the organization's risk financing costs are competitive and whether strategic adjustments are warranted.

Question 62: What is the primary purpose of regulatory compliance in professional practice?

To increase operating costs
To limit the number of practitioners
To protect public safety and ensure minimum standards of care (Correct answer)
To create bureaucratic obstacles

Correct answer: To protect public safety and ensure minimum standards of care

Regulatory compliance exists primarily to protect public safety by ensuring all practitioners meet minimum standards of competence and ethical conduct.

Question 63: Which of the following is the PRIMARY advantage of a large deductible program over a guaranteed-cost insurance policy?

Provides broader coverage with no sublimits
Transfers all catastrophic risk to the insurer at lower cost
Allows the insured to retain investment income on funds held for losses (Correct answer)
Eliminates the need for risk management staff

Correct answer: Allows the insured to retain investment income on funds held for losses

Under a large deductible program the insured retains funds until losses are paid, earning investment income on those reserves that would otherwise go to the insurer.

Question 64: Which action best demonstrates adherence to the RIMS ethical principle of fairness in professional dealings?

Favoring vendors with whom the organization has the longest relationship
Applying consistent standards when evaluating all competing vendors (Correct answer)
Giving preference to minority-owned businesses without evaluation criteria
Selecting vendors based on the recommendation of senior management alone

Correct answer: Applying consistent standards when evaluating all competing vendors

Fairness requires consistent, transparent criteria applied equally to all parties, ensuring impartial professional judgment.

Question 65: What is a SWOT analysis used for?

Evaluating Strengths, Weaknesses, Opportunities, and Threats for strategic planning (Correct answer)
Measuring customer satisfaction
Setting employee performance goals
Analyzing financial statements

Correct answer: Evaluating Strengths, Weaknesses, Opportunities, and Threats for strategic planning

SWOT analysis evaluates internal strengths/weaknesses and external opportunities/threats, providing a comprehensive framework for strategic planning.

Question 66: In risk management, the ethical concept of 'due diligence' primarily refers to:

Following all company procedures without deviation
Obtaining multiple competitive bids before any purchase
Conducting thorough and careful investigation before making professional recommendations (Correct answer)
Completing all assigned tasks by their deadline

Correct answer: Conducting thorough and careful investigation before making professional recommendations

Due diligence in professional ethics means exercising appropriate care and thoroughness in gathering and analyzing information before making recommendations.

Question 67: A retailer places security mirrors in store corners to deter shoplifting. This is an example of which loss control technique?

Separation of exposures
Deterrence (loss prevention) (Correct answer)
Risk transfer
Loss reduction

Correct answer: Deterrence (loss prevention)

Deterrence measures discourage harmful acts before they occur, making mirrors a loss prevention (pre-loss) tool targeting frequency.

Question 68: A risk retention group (RRG) under the federal Liability Risk Retention Act of 1986 must be:

Reinsured by a domestic admitted carrier in each state
Composed of members engaged in similar or related business activities (Correct answer)
Owned by a single corporation with multiple subsidiaries
Licensed in every state where it writes coverage

Correct answer: Composed of members engaged in similar or related business activities

RRGs must be owned and controlled by their members, who must be engaged in similar or related businesses, allowing them to pool liability exposures.

Question 69: A risk manager uses a 'heat map' in portfolio strategy primarily to:

Determine which risks qualify for captive financing
Track insurance renewal dates and premium payments
Visualize risks by likelihood and potential impact for prioritization (Correct answer)
Calculate exact dollar loss values for each risk category

Correct answer: Visualize risks by likelihood and potential impact for prioritization

A heat map plots risks on axes of likelihood and impact, enabling management to quickly identify and prioritize the highest-priority exposures.

Question 70: When assessing inherent risk versus residual risk, inherent risk is defined as:

The risk remaining after controls and mitigation measures are applied
The risk transferred to a third party through insurance
The raw risk exposure that exists before any controls are implemented (Correct answer)
The risk accepted by management as part of normal operations

Correct answer: The raw risk exposure that exists before any controls are implemented

Inherent risk is the level of risk present in a process or activity before any risk controls or mitigation actions are considered.

Question 71: Which financial statement provides the best view of an organization's profitability?

The income statement showing revenues, expenses, and net profit (Correct answer)
The statement of cash flows
The balance sheet
The audit report

Correct answer: The income statement showing revenues, expenses, and net profit

The income statement directly shows revenues, expenses, and net profit over a period, providing the clearest view of operational profitability.

Question 72: When advising a multinational client on a global insurance program, which structure allows local policies to fill gaps where a master policy cannot respond due to local regulations?

Difference in Conditions (DIC) / Difference in Limits (DIL) structure (Correct answer)
Umbrella program
Quota share treaty
Captive fronting arrangement

Correct answer: Difference in Conditions (DIC) / Difference in Limits (DIL) structure

A DIC/DIL structure layers local admitted policies beneath the master policy so that local regulatory requirements are met while the master policy fills any gaps in coverage or limits.

Question 73: A risk manager discovers that a vendor is offering gifts above the company's stated policy limit. The MOST ethical course of action is to:

Decline the gift and report it to compliance (Correct answer)
Accept the gift but disclose it later in an annual report
Accept the gift since it is from an approved vendor
Return half the gift to stay within policy limits

Correct answer: Decline the gift and report it to compliance

Ethical standards require declining gifts that exceed policy thresholds and reporting the incident to compliance to maintain integrity.

Question 74: A client is evaluating a captive insurance arrangement. Which factor MOST strongly indicates a captive may be appropriate for their organization?

The client has had zero losses in the past five years and wants to avoid all risk
The client's board has limited risk management experience and prefers simple solutions
The client operates in a single jurisdiction with standardized commercial insurance available
The client has a large, predictable loss portfolio and sufficient capital to fund retained losses (Correct answer)

Correct answer: The client has a large, predictable loss portfolio and sufficient capital to fund retained losses

Captives are most appropriate when an organization has sufficient scale, predictable losses, and capital reserves to fund retained risks, enabling it to capture underwriting profit rather than paying it to commercial insurers.

Question 75: How often should a practitioner review applicable regulations and standards?

Every five years at renewal time
Only during initial licensure
Only when notified of a violation
Regularly, as regulations are updated frequently and compliance is ongoing (Correct answer)

Correct answer: Regularly, as regulations are updated frequently and compliance is ongoing

Regular review of regulations is necessary because standards evolve frequently, and maintaining current knowledge is essential for ongoing compliance.

Question 76: Which action would most likely constitute a violation of the RIMS ethical standard regarding professional reputation?

Declining to comment on competitors' methodologies
Publicly correcting inaccurate information about risk management practices
Making false statements about a competitor's professional qualifications (Correct answer)
Writing articles critical of industry-wide practices

Correct answer: Making false statements about a competitor's professional qualifications

Making false statements about competitors' qualifications violates ethical standards prohibiting misrepresentation and conduct that harms others' professional reputations unfairly.

Question 77: Which concept describes the practice of insurers using predictive analytics and big data to refine risk segmentation and pricing accuracy?

Advanced underwriting segmentation through data science and machine learning (Correct answer)
Standard ISO loss cost methodology
Reinsurance treaty pricing models
Traditional actuarial reserving

Correct answer: Advanced underwriting segmentation through data science and machine learning

Insurers increasingly use machine learning and granular data sets to segment risks more precisely, moving beyond traditional rating factors.

Question 78: Which provision in a property policy allows the insurer to take possession of damaged property and attempt to restore it rather than paying a total loss settlement?

Reinstatement clause
Abandonment clause (Correct answer)
Salvage clause
Pair and set clause

Correct answer: Abandonment clause

The abandonment clause prevents the insured from simply abandoning damaged property to the insurer; the insurer may choose whether to accept or refuse abandoned property.

Question 79: A supply chain risk manager diversifies suppliers across three continents to ensure business continuity. This strategy is best described as:

Contractual risk transfer
Duplication
Separation of exposures (Correct answer)
Risk avoidance

Correct answer: Separation of exposures

Separating exposures geographically ensures that a regional disruption cannot simultaneously impair all supply sources.

Question 80: A captive insurer holds $10M in loss reserves and $2M in unearned premium reserves. Its surplus is $5M. What is the captive's reserve-to-surplus ratio?

2.0
0.4
3.0
2.4 (Correct answer)

Correct answer: 2.4

Reserve-to-surplus ratio = (loss reserves + unearned premium reserves) / surplus = ($10M + $2M) / $5M = 2.4.

Question 81: What is the purpose of a 'separation of insureds' (cross-liability) clause in a general liability policy?

It prevents one insured from suing another under the same policy
It separates commercial from personal exposures under the same policy
It treats each insured separately so coverage applies as if each had its own policy (Correct answer)
It divides the aggregate limit equally among all named insureds

Correct answer: It treats each insured separately so coverage applies as if each had its own policy

A separation of insureds clause allows each insured to be treated independently, enabling coverage even when one insured sues another.

Question 82: During a client advisory session on cyber risk, which exposure is MOST commonly underestimated by organizations that focus only on first-party cyber losses?

Regulatory fines from state breach notification laws
Cost of hardware replacement after a ransomware attack
Business interruption losses during system restoration
Third-party liability arising from a data breach affecting customers or vendors (Correct answer)

Correct answer: Third-party liability arising from a data breach affecting customers or vendors

Organizations often focus on their own (first-party) recovery costs but underestimate the significant third-party liability exposure from lawsuits brought by customers or business partners affected by a data breach.

Question 83: Which of the following best describes a 'risk-adjusted return on capital' (RAROC) metric?

Return generated per unit of economic capital allocated to a risk (Correct answer)
Return on equity adjusted for systematic risk only
Gross premium minus incurred losses
Net income divided by total assets

Correct answer: Return generated per unit of economic capital allocated to a risk

RAROC measures the return generated relative to the economic capital consumed by a risk, enabling comparison across different risk types.

Question 84: Which of the following BEST describes a multi-year, multi-line (MYML) insurance program in risk financing?

A program that layers primary and excess coverage across three separate policy periods
A guaranteed-cost policy with a three-year rate lock and no loss adjustment
A reinsurance treaty that renews automatically for five years without renegotiation
An integrated policy covering multiple lines of coverage over multiple years within a single aggregate limit (Correct answer)

Correct answer: An integrated policy covering multiple lines of coverage over multiple years within a single aggregate limit

MYML programs combine multiple lines (e.g., property, liability, workers' comp) and multiple policy years under one aggregate limit, providing diversification and premium smoothing.

Question 85: What role do economic indicators play in market analysis?

They only affect government-related industries
They provide context for understanding market conditions and predicting changes (Correct answer)
They replace the need for company-specific analysis
They are too broad to be useful for individual businesses

Correct answer: They provide context for understanding market conditions and predicting changes

Economic indicators provide essential context for market conditions, helping professionals anticipate changes that may affect their industry and clients.

Question 86: Which market cycle phase is characterized by insurers loosening underwriting standards and aggressively reducing premiums to gain market share?

Hard market
Soft market (Correct answer)
Transitional market
Distressed market

Correct answer: Soft market

In a soft market, excess capacity and competition cause insurers to lower premiums and ease underwriting criteria.

Question 87: A risk manager benchmarking their property insurance program notices their rate is 20% above the market median for similar risks. What should be the primary analytical step?

Investigate whether unique risk characteristics justify the premium differential (Correct answer)
Reduce coverage limits to lower the premium
Immediately switch to the cheapest available insurer
Assume the market is wrong and retain the current insurer

Correct answer: Investigate whether unique risk characteristics justify the premium differential

Benchmarking anomalies require investigation to determine if risk characteristics, loss history, or coverage differences explain the differential before drawing conclusions.

Question 88: Reinsurance is used in risk portfolio strategy primarily to:

Provide coverage directly to policyholders for catastrophic events
Replace the need for a primary insurance policy for routine losses
Enable corporations to avoid regulatory capital requirements
Allow primary insurers to transfer a portion of their risk to another insurer, reducing exposure concentration (Correct answer)

Correct answer: Allow primary insurers to transfer a portion of their risk to another insurer, reducing exposure concentration

Reinsurance allows primary insurers to cede portions of their risk portfolio to reinsurers, managing capacity constraints, capital requirements, and catastrophic loss exposure.

Question 89: Under Risk-Based Capital (RBC) requirements, what action is triggered when an insurer's RBC ratio falls below the 'Company Action Level'?

Automatic policy cancellation for all policyholders
The insurer must submit a comprehensive financial plan to regulators (Correct answer)
Immediate state takeover of the insurer
Mandatory reinsurance purchase

Correct answer: The insurer must submit a comprehensive financial plan to regulators

At the Company Action Level, the insurer must file a corrective action plan with the state insurance department outlining steps to restore capital adequacy.

Question 90: In the context of insurance regulation, what does the concept of 'guaranty fund assessment' mean for risk managers of solvent insurers?

Risk managers must fund a reserve equal to one year of premiums as a solvency guarantee
The state guaranty fund assesses policyholders directly for insolvency costs
Federal guarantee funds assess insurers based on systemic risk scores
Solvent insurers may be assessed to pay claims of insolvent insurers' policyholders (Correct answer)

Correct answer: Solvent insurers may be assessed to pay claims of insolvent insurers' policyholders

State guaranty associations assess solvent member insurers to fund claims against insolvent insurers, representing a contingent liability for risk managers to consider.

Question 91: The concept of 'duty of loyalty' in RIMS professional ethics primarily means:

Always agreeing with employer decisions to maintain employment
Remaining with a single employer throughout one's career
Prioritizing the employer's interest over all regulatory requirements
Acting in the best interest of the employer and clients within ethical bounds (Correct answer)

Correct answer: Acting in the best interest of the employer and clients within ethical bounds

Duty of loyalty means faithfully serving employer and client interests, but never at the expense of ethical or legal obligations.

Question 92: What is 'correlation risk' in the context of a diversified risk portfolio?

The risk that risk ratings assigned to different exposures are inconsistent
The risk that assets or losses move together during stress events, reducing diversification benefits (Correct answer)
The risk that two unrelated events happen simultaneously by chance
The risk that a counterparty defaults on a correlated hedge position

Correct answer: The risk that assets or losses move together during stress events, reducing diversification benefits

Correlation risk occurs when risks that appear uncorrelated under normal conditions become correlated during stress events, undermining the protective value of diversification.

Question 93: Why is it important to evaluate insurance policies regularly?

To increase service fees
To ensure adequate coverage and protection from emerging risks
To track employee performance (Correct answer)
To reduce operational costs

Correct answer: To track employee performance

Regularly evaluating insurance policies can indirectly involve tracking employee performance, especially for policies tied to employee-related risks or benefits. For instance, workers' compensation premiums are often influenced by workplace safety records, which are a reflection of employee adherence to safety protocols. Similarly, health insurance costs can be affected by employee wellness program participation, making performance in these areas relevant to policy evaluation.

Question 94: Which technique involves systematically examining each component of a system to identify how it could fail and the impact of that failure?

Bowtie analysis
Fault tree analysis
Failure mode and effects analysis (FMEA) (Correct answer)
Root cause analysis

Correct answer: Failure mode and effects analysis (FMEA)

FMEA systematically examines each component to identify potential failure modes and their effects on the overall system.

Question 95: A risk manager notices that the loss development factors (LDFs) for a particular line of business have been consistently greater than 1.0 for five years. What does this indicate?

Losses are settling faster than expected
The book of business is shrinking
Reported losses continue to increase as claims mature, suggesting adequate IBNR reserves are needed (Correct answer)
Investment yields have declined

Correct answer: Reported losses continue to increase as claims mature, suggesting adequate IBNR reserves are needed

LDFs greater than 1.0 indicate that losses grow from one development period to the next, signaling that IBNR reserves must be established to account for future development.

Question 96: A client's CFO questions the value of a risk management program that has had no major claims for three years. What is the BEST advisory response?

Transfer all retained risks to a new captive to demonstrate savings
Acknowledge that the program may be over-engineered and propose cuts
Recommend reducing insurance spend since claims experience is favorable
Explain that absence of claims may reflect the program's effectiveness and present total cost of risk data (Correct answer)

Correct answer: Explain that absence of claims may reflect the program's effectiveness and present total cost of risk data

A skilled advisor frames low claims as potential evidence of effective risk controls and presents total cost of risk (TCOR) metrics to demonstrate overall program value beyond just claims.

Question 97: When advising a client on supply chain risk, which approach provides both financial protection and operational resilience guidance?

Relying solely on the suppliers' own insurance programs to cover downstream losses
Transferring all supply chain risk to a single third-party logistics provider
Purchasing trade credit insurance only, as it covers all supply chain losses
Combining contingent business interruption (CBI) insurance with supplier diversification and business continuity planning (Correct answer)

Correct answer: Combining contingent business interruption (CBI) insurance with supplier diversification and business continuity planning

Effective supply chain risk advisory integrates CBI insurance to fund financial losses with operational strategies (supplier diversification, BCP) to reduce the likelihood and duration of disruptions.

Question 98: Under a commercial general liability (CGL) policy, 'products-completed operations' coverage applies to bodily injury or property damage arising from:

Work in progress at the job site
Employee injuries during manufacturing
Professional errors during product design
Products sold or work completed away from the insured's premises (Correct answer)

Correct answer: Products sold or work completed away from the insured's premises

Products-completed operations covers liability for harm caused by the insured's products or completed work after they leave the insured's control.

Question 99: How does a self-insured retention (SIR) differ from a standard deductible in a commercial insurance policy?

An SIR is paid after the policy limit is exhausted, while a deductible is paid first
A deductible applies only to property losses, while an SIR applies only to liability losses
An SIR requires the insured to defend and pay claims up to the retention before insurer involvement, while a deductible typically involves the insurer advancing defense costs (Correct answer)
An SIR is always larger than a deductible

Correct answer: An SIR requires the insured to defend and pay claims up to the retention before insurer involvement, while a deductible typically involves the insurer advancing defense costs

With an SIR the insured controls and pays claims within the retention layer independently; with a deductible the insurer typically defends and pays then seeks reimbursement.

Question 100: How should client communications be documented?

Maintain detailed records of all substantive communications and decisions (Correct answer)
Only document written communications
Rely on memory for routine conversations
Document only when the client requests it

Correct answer: Maintain detailed records of all substantive communications and decisions

Documenting all substantive communications protects both parties, prevents misunderstandings, and creates an audit trail for compliance purposes.

Question 101: Why is it important to involve all departments in risk identification?

To reduce costs (Correct answer)
To monitor performance
To track profits
To ensure a comprehensive view of potential risks

Correct answer: To reduce costs

Involving all departments in risk identification can indirectly contribute to cost reduction by uncovering inefficiencies or potential losses across the organization. For example, risks related to waste, rework, or unnecessary expenditures, once identified by relevant departments, can be addressed. This collaborative approach helps optimize resource allocation and lower operational costs.

Question 102: A risk manager calculates a net present value (NPV) of risk financing alternatives. Why is NPV preferred over simple payback period?

NPV is easier to compute manually
NPV accounts for the time value of money across all cash flows (Correct answer)
NPV ignores uncertainty in future cash flows
NPV is required by GAAP for risk disclosures

Correct answer: NPV accounts for the time value of money across all cash flows

NPV discounts all future cash flows to present value, making it a superior tool for comparing alternatives with different cost and benefit timing profiles.

Question 103: What distinguishes 'secondary risks' from 'residual risks' in risk management?

Residual risks require insurance while secondary risks do not
Secondary risks are higher priority than residual risks
Secondary risks are external and residual risks are internal
Secondary risks arise as a direct result of implementing a risk response; residual risks remain after treatment (Correct answer)

Correct answer: Secondary risks arise as a direct result of implementing a risk response; residual risks remain after treatment

Secondary risks are new risks introduced by the mitigation action itself, while residual risks are what remain of the original risk after controls are applied.

Question 104: What is the role of insurance in risk management?

To reduce costs
To provide financial protection against losses
To track profits
To monitor market trends (Correct answer)

Correct answer: To monitor market trends

While insurance primarily offers financial protection, the insurance industry itself heavily relies on monitoring market trends as part of its risk management strategy. Insurers analyze economic shifts, emerging risks, and industry-specific trends to accurately price policies, develop new coverage options, and maintain solvency. This continuous market analysis allows them to effectively manage their own exposure and provide relevant products to clients.

Question 105: Under a fiduciary liability policy, coverage is triggered when a plan fiduciary commits a 'breach of fiduciary duty' as defined under:

The Sarbanes-Oxley Act compliance standards
State tort law governing negligence
The Securities Exchange Act of 1934
The Employee Retirement Income Security Act (ERISA) (Correct answer)

Correct answer: The Employee Retirement Income Security Act (ERISA)

ERISA establishes the fiduciary standards for employee benefit plan administrators, and fiduciary liability policies are designed to cover breaches of those ERISA-imposed duties.

Question 106: How should strategy implementation be monitored?

Through key performance indicators aligned with strategic objectives (Correct answer)
By waiting for annual review results
Through informal observations
Only when problems are reported

Correct answer: Through key performance indicators aligned with strategic objectives

KPIs aligned with strategic objectives provide ongoing, objective measurement of implementation progress, enabling timely adjustments when needed.

Question 107: What should organizations do to ensure ongoing regulatory compliance?

Conduct regular reviews, audits, and training
Ignore compliance requirements
Monitor employee behavior
Increase service fees (Correct answer)

Correct answer: Increase service fees

Ensuring ongoing regulatory compliance often requires significant investment in systems, training, and personnel to keep pace with evolving regulations. These increased operational costs, necessary for maintaining robust compliance programs, may necessitate an adjustment in an organization's pricing structure. Therefore, increasing service fees can be a practical measure to cover the expenses associated with continuous compliance efforts, ensuring the organization has the resources to meet its regulatory obligations effectively.

Question 108: Under the Equal Employment Opportunity Commission (EEOC) guidelines, an employer's failure to accommodate a disabled employee's known limitations may constitute what type of discrimination?

Failure to provide reasonable accommodation under the ADA (Correct answer)
Systemic wage discrimination
Hostile work environment harassment
Disparate impact discrimination

Correct answer: Failure to provide reasonable accommodation under the ADA

The ADA requires employers to provide reasonable accommodation to qualified individuals with disabilities unless doing so would cause undue hardship.

Question 109: Which type of risk involves the potential for loss arising from failed internal processes, people, systems, or external events?

Credit risk
Operational risk (Correct answer)
Liquidity risk
Market risk

Correct answer: Operational risk

Operational risk, as defined by Basel II/III and widely adopted in ERM, encompasses losses from internal failures and external events.

Question 110: Which risk financing technique involves the client pre-funding expected losses in a dedicated account while retaining the risk rather than transferring it to an insurer?

Stop-loss reinsurance
Funded reserve / funded retention program (Correct answer)
Finite risk insurance
Retrospective rating plan

Correct answer: Funded reserve / funded retention program

A funded retention program involves setting aside capital in a dedicated reserve or trust to pay for anticipated losses, making retention financially organized and disciplined rather than ad hoc.

Question 111: How should a professional handle a client disagreement about recommendations?

Listen actively, explain the rationale, and document the client decision (Correct answer)
Ignore the disagreement and proceed
Withdraw the recommendation immediately
Insist the professional recommendation is always correct

Correct answer: Listen actively, explain the rationale, and document the client decision

Active listening, clear explanation of rationale, and documenting the client final decision respects client autonomy while ensuring professional obligations are met.

Question 112: What distinguishes excellent client service from adequate service?

Proactive anticipation of client needs and personalized attention (Correct answer)
Responding to every request within 24 hours
Offering the lowest prices
Having the most certifications

Correct answer: Proactive anticipation of client needs and personalized attention

Excellent service goes beyond reactive responses to proactively anticipate needs and provide personalized attention that demonstrates genuine commitment to client success.

Question 113: Which emerging risk trend is driving the development of parametric insurance products in the property market?

Declining property values in coastal regions
Regulatory mandates requiring parametric coverage for all property risks
Surplus underwriting capacity reducing the need for traditional products
Increased frequency of climate-related natural catastrophes and coverage gaps (Correct answer)

Correct answer: Increased frequency of climate-related natural catastrophes and coverage gaps

Climate-related catastrophes expose coverage gaps in indemnity products, and parametric insurance provides faster payouts based on objective triggers like wind speed or rainfall.

Question 114: A 'blanket' property insurance policy differs from a 'specific' policy because it:

Covers only the highest-value location automatically
Applies a single limit across multiple locations or property types (Correct answer)
Requires itemized values for each building separately
Covers only one location with a single stated limit

Correct answer: Applies a single limit across multiple locations or property types

A blanket policy provides one combined limit that can apply to any or all covered locations or property items, offering greater flexibility.

Question 115: A risk manager observes that reinsurance capacity for catastrophe risks has tightened significantly. What is the most likely direct impact on primary insurance pricing?

Primary insurers will exit the market entirely
Primary premiums remain unaffected by reinsurance market changes
Primary premiums will increase as reinsurance costs are passed to insureds (Correct answer)
Primary premiums will decrease as insurers absorb the cost

Correct answer: Primary premiums will increase as reinsurance costs are passed to insureds

Reinsurance costs are a key component of primary insurer pricing, so tightening reinsurance capacity typically drives up primary premiums.

Question 116: A risk manager discovers that their employer is underreporting workplace injuries to avoid higher workers' compensation premiums. What is the most ethical course of action?

Consult only with colleagues to decide collectively
Report the misconduct internally and, if unresolved, to the appropriate regulatory authority (Correct answer)
Adjust the reports slightly to reduce the discrepancy
Ignore the issue to maintain job security

Correct answer: Report the misconduct internally and, if unresolved, to the appropriate regulatory authority

RIMS ethical standards require risk professionals to act with integrity, which includes reporting illegal or unethical practices through appropriate channels.

Question 117: A client is considering a Risk Retention Group (RRG) to address difficult-to-place liability coverage. What is a defining characteristic of an RRG under U.S. law?

An RRG can write all lines of insurance including property and workers' compensation
An RRG operates identically to a traditional stock insurance company with outside shareholders
An RRG is a member-owned liability insurer chartered under the Liability Risk Retention Act that can operate in all states once licensed in one (Correct answer)
An RRG must be domiciled offshore to qualify for federal exemptions

Correct answer: An RRG is a member-owned liability insurer chartered under the Liability Risk Retention Act that can operate in all states once licensed in one

Under the federal Liability Risk Retention Act of 1986, an RRG is a member-owned insurer licensed in one state that may provide liability coverage to its members in all U.S. states without separate state licensing.

Question 118: Under directors and officers (D&O) liability insurance, 'Side A' coverage is designed to protect:

Shareholders who sue the company's board
Directors and officers directly when the company cannot or will not indemnify them (Correct answer)
The company's legal fees for securities investigations
The corporation when it indemnifies its directors and officers

Correct answer: Directors and officers directly when the company cannot or will not indemnify them

Side A coverage fills the gap by protecting individual directors and officers when corporate indemnification is unavailable, such as during insolvency.

Question 119: Which communication technique is MOST effective when a risk advisor needs to convey complex technical insurance terms to a non-expert client executive?

Defer all explanations to the broker and focus only on pricing
Send a written memo using standard industry jargon for precision
Provide a full policy document for the executive to review independently
Use analogies, plain language summaries, and visual aids tailored to the audience (Correct answer)

Correct answer: Use analogies, plain language summaries, and visual aids tailored to the audience

Translating technical concepts into plain language with analogies and visuals ensures executive stakeholders understand risks and make informed decisions without being overwhelmed by jargon.

Question 120: A client asks for help designing a business interruption (BI) insurance program. What is the MOST important input needed to set an adequate BI limit?

A detailed financial model projecting revenues, expenses, and recovery timelines (Correct answer)
The current market value of the company's stock
The number of full-time employees at each location
The replacement cost of all physical assets

Correct answer: A detailed financial model projecting revenues, expenses, and recovery timelines

BI limits must be based on a financial model that captures projected revenue loss, continuing fixed expenses, and the maximum estimated period of restoration to determine the correct indemnity period and limit.

RIMS-CRMP: Certified Risk Management Professional

The RIMS-CRMP credential validates professionals' expertise in enterprise risk management, covering risk analysis, strategy design, process implementation, organizational competency development, and decision support across five core domains.

120

Questions

120 min

Time Limit

71%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds