RIMS Client Advisory & Consultation 3 — Questions and Answers
Question 1: A client in the manufacturing sector wants to implement an enterprise risk management (ERM) framework. Which standard is MOST widely referenced for structuring an ERM program?
- ISO 9001 Quality Management Standard
- COSO ERM Framework (Correct answer)
- NFPA 13 Sprinkler Standard
- SEC Regulation S-K
Correct answer: COSO ERM Framework
The COSO ERM Framework (updated 2017) is the most widely referenced standard for designing and assessing enterprise risk management programs across industries.
Question 2: During a risk consultation, a client discloses information suggesting potential fraud within their own organization. What is the risk advisor's primary obligation?
- Immediately report the information to the client's insurer to protect policy validity
- Advise the client to disclose the matter to appropriate internal governance and legal counsel (Correct answer)
- Keep the information confidential under client privilege and take no action
- Contact law enforcement directly without informing the client
Correct answer: Advise the client to disclose the matter to appropriate internal governance and legal counsel
The advisor's primary obligation is to direct the client to appropriate internal governance channels (audit committee, legal counsel) so the matter is handled through proper procedures while respecting professional boundaries.
Question 3: A client asks for help designing a business interruption (BI) insurance program. What is the MOST important input needed to set an adequate BI limit?
- The replacement cost of all physical assets
- A detailed financial model projecting revenues, expenses, and recovery timelines (Correct answer)
- The number of full-time employees at each location
- The current market value of the company's stock
Correct answer: A detailed financial model projecting revenues, expenses, and recovery timelines
BI limits must be based on a financial model that captures projected revenue loss, continuing fixed expenses, and the maximum estimated period of restoration to determine the correct indemnity period and limit.
Question 4: Which type of risk advisory engagement focuses on identifying gaps between a client's current insurance program and their actual risk exposures?
- Claims advocacy review
- Coverage gap analysis (Correct answer)
- Actuarial loss projection
- Premium benchmarking study
Correct answer: Coverage gap analysis
A coverage gap analysis systematically compares what a client's policies actually cover against their identified risk exposures to highlight uninsured or underinsured areas.
Question 5: A client is evaluating a captive insurance arrangement. Which factor MOST strongly indicates a captive may be appropriate for their organization?
- The client has had zero losses in the past five years and wants to avoid all risk
- The client has a large, predictable loss portfolio and sufficient capital to fund retained losses (Correct answer)
- The client operates in a single jurisdiction with standardized commercial insurance available
- The client's board has limited risk management experience and prefers simple solutions
Correct answer: The client has a large, predictable loss portfolio and sufficient capital to fund retained losses
Captives are most appropriate when an organization has sufficient scale, predictable losses, and capital reserves to fund retained risks, enabling it to capture underwriting profit rather than paying it to commercial insurers.
Question 6: A risk advisor is conducting a stakeholder interview as part of a risk assessment. What is the PRIMARY purpose of these interviews?
- To negotiate lower insurance premiums with the underwriter
- To gather qualitative insights on emerging risks and risk culture that quantitative data may not capture (Correct answer)
- To satisfy ISO 31000 documentation requirements for the client
- To replace the need for loss run analysis from insurers
Correct answer: To gather qualitative insights on emerging risks and risk culture that quantitative data may not capture
Stakeholder interviews surface qualitative intelligence—risk culture, emerging concerns, and operational nuances—that historical loss data and quantitative models often cannot reveal.
Question 7: When advising a client on parametric insurance, what is the defining characteristic that distinguishes it from traditional indemnity coverage?
- Parametric insurance only covers property damage and excludes liability
- Payouts are triggered by a predefined index or parameter (e.g., wind speed, earthquake magnitude) regardless of actual loss (Correct answer)
- Parametric policies require a full claims adjustment before any payment is made
- Parametric coverage is only available through Lloyd's of London
Correct answer: Payouts are triggered by a predefined index or parameter (e.g., wind speed, earthquake magnitude) regardless of actual loss
Parametric insurance pays a predetermined amount when a specified trigger (such as wind speed or rainfall level) is met, eliminating the need for individual loss adjustment and providing faster payouts.
RIMS Client Advisory & Consultation 3
A client in the manufacturing sector wants to implement an enterprise risk management (ERM) framework.
Which standard is MOST widely referenced for structuring an ERM program?