OpenExamsFREE PRACTICE — ANY EXAM

Free Risk in Financial Services Practice Questions

100 free questions · Answer explanations · No signup required

View examination details, outline and sources

Loading selected examination banks…

Sample Practice Questions

Try these 10 sample questions from the Risk in Financial Services practice bank. Each includes the answer and explanation. Continue with the interactive practice above to review the full question set.

  1. 1A firm has listed its major risks but has neither assessed their significance nor selected controls. Which activity would make its approach a risk management process rather than only a risk inventory?

    1. A.Measuring the risks and choosing ways to control themCorrect answer: A
    2. B.Ranking departments solely by their latest revenue
    3. C.Replacing risk estimates with the annual profit target
    4. D.Recording only events that have already caused a loss

    Explanation: The CISI manual states: "identifying these risks, measuring them, and using tools and processes to reduce or control them.". Identification is only one stage. Measurement and control turn the inventory into management; revenue ranking, a profit target and a loss-only register do not assess and address the identified exposures.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 1, Chapter Summary, printed p. 2

  2. 2Which statement describes the Bank for International Settlements' customer role?

    1. A.It provides current accounts mainly to retail savers
    2. B.It provides banking services to central banksCorrect answer: B
    3. C.It accepts deposits mainly from listed companies
    4. D.It provides mortgages directly to household borrowers

    Explanation: The CISI manual explains: "Its customers are central banks and international organisations". The BIS serves central banks and international organisations, rather than private retail or corporate banking customers.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 2, section 1.1, printed p. 35

  3. 3How does the Basel operational risk definition treat legal risk and reputational risk?

    1. A.It includes legal risk but excludes reputational riskCorrect answer: A
    2. B.It includes reputational risk but excludes legal risk
    3. C.It excludes both legal risk and reputational risk
    4. D.It includes both legal risk and reputational risk

    Explanation: The CISI manual identifies "This definition covers legal risk (including fines, penalties and punitive damage resulting from regulatory actions, as well as private settlements), but excludes reputation risk.". Legal risk is included, while reputational risk is excluded from this definition. A reputational consequence of an operational event does not change that boundary.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 3, section 1.1, printed p. 60

  4. 4A bond is delivered correctly to an investor, but the company that issued it later fails to pay the scheduled coupon. Which credit risk has materialised?

    1. A.The selling broker's settlement risk
    2. B.The investor's funding liquidity risk
    3. C.The bond issuer's payment riskCorrect answer: C
    4. D.The custodian's processing risk

    Explanation: The CISI manual states: "the issuer of the bond could default on its obligations to pay coupons". Issuer risk concerns the issuer's promised coupon and principal payments. Correct delivery rules out the broker settlement issue; no funding shortfall or custody processing failure is described.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 4, section 1.1, printed p. 95

  5. 5An airline hedges its jet-fuel exposure using a related oil futures contract, but the two prices do not move identically. What residual market risk does this mismatch create?

    1. A.Issuer risk
    2. B.Funding liquidity risk
    3. C.Settlement risk
    4. D.Basis riskCorrect answer: D

    Explanation: The CISI manual states: "Basis risk exists to the extent that the two positions do not exactly mirror each other.". Basis risk arises when a related hedging instrument does not exactly mirror the exposure. It is different from an issuer failing to pay, a funding shortfall or settlement default.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 5, section 1.1.4, printed p. 123

  6. 6An investment earns a nominal annual return of 8% while annual inflation is 4%. Using the exact inflation adjustment, what is the real return, rounded to two decimal places?

    1. A.4.00%
    2. B.12.00%
    3. C.7.69%
    4. D.3.85%Correct answer: D

    Explanation: The CISI manual explains: "(1 + real rate of return) × (1 + inflation rate) = 1 + nominal rate of return". Real return =1.08/1.04 −1 =0.0384615, or 3.85% to two decimal places. 4% merely subtracts inflation;12% adds it;7.69% divides the nominal rate alone by 1.04.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 6, section 1.1.2, printed p. 154

  7. 7What is the main purpose of a maturity ladder in liquidity analysis?

    1. A.To classify cash flows by counterparty credit rating rather than settlement date
    2. B.To estimate income-statement profit without separating cash payment dates
    3. C.To assign all future flows to the reporting date for balance-sheet valuation
    4. D.To compare expected cash inflows and outflows over successive time periodsCorrect answer: D

    Explanation: The CISI manual explains: "comparing cash inflows and outflows, both on a daily basis and over a series of specified time periods.". A maturity ladder compares the timing of cash inflows and outflows to identify funding requirements. Credit ranking, accrual profit and assigning every flow to the current reporting date do not perform that timing comparison.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 7, section 1.1.1, printed p. 180

  8. 8A successful pricing model is proposed for use in a new business whose products violate the model's original assumptions. What is the central model-risk concern?

    1. A.The model's previous profitability is sufficient evidence for its new application
    2. B.The larger proposed business automatically makes historical assumptions more representative
    3. C.Adding more output variables by itself validates the model's suitability for the new products
    4. D.The proposed application may exceed the scope supported by the model's design assumptionsCorrect answer: D

    Explanation: The CISI manual explains: "any attempt to ‘reuse’ their outputs for purposes other than that for which they were designed can have adverse consequences.". A model's assumptions and intended scope need to fit the products for which its outputs are used. Prior profitability, a larger business or additional outputs does not by itself validate that new use.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 8, section 1.1.2, printed p. 204

  9. 9A board has approved the firm's overall risk appetite. Which activity is a typical role of its risk committee?

    1. A.Set the firm's ultimate appetite independently of the board's approval
    2. B.Carry out day-to-day operating checks in place of business line managers
    3. C.Provide third-line assurance by taking over internal audit's programme
    4. D.Translate board-approved appetite into limits for divisions and committeesCorrect answer: D

    Explanation: The CISI manual explains: "translate the overall risk appetite of the firm, approved by the board, into a set of limits". A risk committee translates board-approved appetite into usable limits. The board retains ultimate appetite oversight; routine business checks and third-line audit assurance have different owners.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 9, section 1.1.2, printed p. 220

  10. 10Which description best captures the scope and purpose of enterprise risk management?

    1. A.Manage relevant risks and their interrelationships across the whole enterpriseCorrect answer: A
    2. B.Manage financial risks together while leaving operational risks outside the framework
    3. C.Combine reports by department without examining connections between their exposures
    4. D.Use the loss ledger as the main enterprise view without considering emerging exposures

    Explanation: The CISI manual explains: "not only individually, but also in the way that they relate to each other.". ERM addresses all relevant risk types and their connections at enterprise level. Excluding operational risks, simply collating disconnected reports or relying on realised losses misses that integrated prospective scope.

    Reference: CISI Risk in Financial Services Learning Manual — Chapter 10, section 1.1, printed p. 233

Exam Review

About Risk in Financial Services

Risk in Financial Services · GB

Key exam facts

Provider
Chartered Institute for Securities & Investment (CISI), examination owner and learning-material publisher.
Format
Multiple-choice knowledge exam, available by remote invigilation or at computer-based test centres.
Exam questions
Total questions: 100–110; Scored questions: 100; Unscored questions: 0–10; The total includes the scored and unscored questions.
Time limit
2 hours for 100 core questions; proportionately more time is allowed for additional CBT trial questions.
Passing score
70%: the Version 12 official sample paper classifies scores 70–100 as Pass and 0–69 as Fail.
Exam fee
UK prices, 1 April 2026–31 March 2027: exam GBP 283; mandatory workbook GBP 105 separately; saver package GBP 403 (exam, workbook and Revision Express); one-off GBP 68 qualification registration fee when registering the first qualification. Concessionary rates are available for unemployed individuals.

Topics covered

  • Principles of Risk Management (13%)

    • Introduction to Risk in Business
    • Specific Risks in Financial Services
    • Emerging considerations for the Financial Services industry
    • understand the processes typically used to identify, reduce and manage specific aspects of risk
    • understand the key elements of risk management and the differences between risk and uncertainty
    • know the key external sources of risk and their potential impact on a business: • economic • political • competitive environment, social and market forces • technological including cyber security • geopolitical and natural events • external stakeholders and third parties • Environmental, Social, and Governance (ESG) risks
    • understand how the key external sources of risk are typically assessed
    • know the key internal drivers of risk: • strategic • operational • financial
    • understand how the key internal drivers of risk are typically assessed
    • understand the overlapping and interactive nature of external and internal risk drivers
    • understand the following risk concepts: • risk culture and conduct risk • risk appetite • inherent (gross) risk • residual (net) risk • risk profile • risk mitigation • reputational risk
    • understand how risk management protects and adds value to an organisation and its stakeholders
    • know the specific key risks in financial services as defined by the Bank for International Settlements
    • understand the relationships between risks in financial systems
    • understand the nature of systemic risk and recovery and resolution planning within financial services
    • know potential benefits and problems associated with disruptive innovation in: • Fintech • RegTech • Digital assets, Blockchain, Cryptocurrencies and Smart contracts

  • International Risk Regulation (7%)

    • The Bank for International Settlements
    • Basel Regulatory Capital
    • Regulatory Risk
    • Other Relevant Regulations
    • understand the role of the Bank for International Settlements within the financial services industry
    • know the purposes for which the Basel Committee on Banking Supervision was established, and the drivers it introduced to calculate the capital adequacy of banks
    • understand the high-level international guidelines and supervisory standards established by the Basel Committee and differences in global implementation
    • know the purpose, key features and implementation implications of Basel: • Pillars 1 (Capital Adequacy), 2 (Supervisory Review) and 3 (Market Discipline) • Sound Practice Principles • Internal capital and liquidity adequacy assessment
    • understand the key principles of home-host state regulation
    • understand the main differences between statutory and principles- based approaches to financial regulation
    • understand the responsibility of the national regulator to implement supervision measures to address country-specific risks
    • understand the main features of the regulatory framework from the perspective of regulatory risk and implementation: • consumer protection • business standards • financial crime prevention • regulatory standards
    • understand the purpose and process of risk based regulatory reviews and risk assessment visits
    • understand the importance of considering other legislation within the processes of risk identification and management

  • Operational Risk (18%)

    • Definitions of Operational Risk
    • Operational Risk Policy
    • Operational Risk Framework
    • Operational Risk Identification
    • Operational Risk Assessment and Measurement
    • Managing Operational Risk
    • know the definition of operational risk according to the Basel Committee on Banking Supervision
    • know the Basel operational risk event types and what forms they take: • Internal Fraud • External Fraud • Employment Practices and Workplace Safety • Clients, Products, & Business Practice • Damage to Physical Assets • Business Disruption & Systems Failures • Execution, Delivery & Process Management
    • know where and how the Basel operational risk event types typically arise
    • be able to distinguish operational risk from: • other forms of risk • further risks that arise as a consequence of operational risk
    • understand the following areas that are addressed by an operational risk policy and what they are designed to achieve: • identification of key officers • define clear roles and responsibilities • segregation of duties • cross functional involvement and agreement
    • understand the key aims of the operational risk management function: • identification and assessment of risks • management of risks • reduction of potential impact and likelihood of occurrence
    • know the stages of an operational risk management framework: • identification • measurement • management and control • management information • monitoring • escalation • remediation
    • understand the purpose of identifying and categorising risks
    • understand the self-assessment (self-certification) method of identifying operational risks
    • be able to apply risk categorisation to simple, practical examples of normal activity and change-related projects: • people • processes • systems • external events
    • understand the main reasons for assessing and measuring operational risk, and the difficulties involved
    • know the basic terms used in the assessment and measurement of operational risk
    • understand the following methods of assessing operational risk: • impact and likelihood assessment • scenario analysis • bottom-up analysis
    • understand the Key Risk Indicators (KRI) method of measuring operational risk
    • understand how historical loss data can be used in measuring operational risk
    • understand the practical constraints of implementing an operational risk management framework
    • know the purpose of a risk register (risk log) and its core features: • objectives • description of risk • risk ranking • lead person or department • action plan • target and completion dates • sources of assurance and oversight • mitigating controls
    • be able to distinguish between the following methods for reducing operational risk exposure: • risk transfer • risk avoidance • risk mitigation • risk acceptance
    • know the common methods for operational risk mitigation: • controls • financial crime compliance • operational resilience • outsourcing • insurance • information, cyber security • data protection and privacy • physical security • financial reserves • risk awareness training
    • understand how historical loss data can be used in managing operational risk

  • Credit Risk (16%)

    • Identification of Credit Risk
    • Credit Risk Measurement
    • Credit Risk Management
    • understand the key components of credit risk and how they arise: • counterparty risk • issuer risk • concentration risk
    • know the main areas of exposure of counterparty, systematic and issuer risk within banking, securities and investment functions
    • understand credit risk boundary issues as identified within Basel
    • understand the following techniques for measuring credit risk and what they are designed to achieve: • credit exposure • credit risk premium • credit ratings
    • understand the role and influence of credit rating agencies
    • understand the merits and limitations of using credit ratings to assess creditworthiness of companies and financial instruments
    • understand the key issues relating to counterparty credit risk and applications in practice: • probability of default (PD) • loss given default (LGD) • exposure at default (EAD) • recovery rates (RR) • credit events • maturity • wrong way risk • non-performing assets
    • know the basic principles of setting credit limits for trade book and loan product risk management
    • understand the main limitations of credit risk measurement
    • understand the following examples of credit risk mitigation, and how they may be typically applied: • underwriting standards • guarantees • credit limits • netting • collateral • diversification • insurance / credit derivatives • credit default swaps • collateralised debt obligations • loan sales and securitisation • central counterparties
    • be able to calculate a simple margin or collateral adequacy calculation
    • understand the role and sound practice features of an effective credit risk management function
    • understand the role of reporting and escalation tools of credit risk management
    • know the Basel key stages of credit risk policy development, modelling and control: • development • validation • approval • implementation • review • post-implementation monitoring
    • understand the methods used to manage credit risk: • credit scoring systems • factor inputs: financial, non-financial and extraordinary • stress testing • segmentation • external ratings • setting limits or caps • internal credit rating • provisioning and impairment • key statistics and key performance indicators
    • understand the purpose and methods of controlling concentration risk: • single borrower or group of related borrowers • country, sector and industry risk
    • understand the purpose and principles of controlling trading book risk: • Value-at-Risk (VaR) • confidence levels

  • Market Risk (12%)

    • Identification of Market Risk
    • Market Risk Management
    • know and be able to identify the different types of market risk: • volatility risk • market liquidity risk • currency risk • basis risk • interest rate risk • commodity risk • equity risk
    • understand the boundary issues that can arise between different types of market risk
    • be able to apply an understanding of market risk to simple, practical situations
    • understand the following techniques and their application in managing market risk: • hedging • market risk limits • diversification
    • understand the role and sound practice features of an effective market risk management function
    • know the key measures of central tendency and dispersion: • range and inter-quartile range • median • mean and quartile deviation • variance • standard deviation
    • understand the relevance and application of measures of central tendency and dispersion within risk analysis
    • understand the terms distribution analysis, confidence intervals, normal distribution and fat tailed distribution, and how they are used within risk analysis
    • know the following concepts used in risk measurement and control: • probability • volatility • regression • correlation coefficients alpha and beta • optimisation
    • understand the Value-at-Risk (VaR) approach to managing market risk: • VaR limit setting and monitoring for bank trading positions • VaR as a portfolio measure of risk • validation and back testing
    • know the three different approaches to VaR: • historical simulation • parametric • Monte Carlo
    • understand the underlying purposes, principles and application of the main types of scenario analysis and stress testing: • extreme event • risk factor • external factor

  • Investment Risk (11%)

    • The Measurement of Investment Returns
    • Identification, Measurement and Management of Investment Risk
    • understand the basic concepts and measurement of investment related returns: • nominal returns • real returns • total returns • holding period return
    • understand the effects of compound interest and the time value of money
    • understand how the rates of return from the main asset classes vary
    • understand the main investment risks and their implications for investors and investment selection: • currency risk • interest rate risk • issuer risk • equity risk • commodity risk • property risk • fund liquidity risk
    • understand how asset and portfolio investment risk is calculated
    • understand the significance of alpha, beta and key investor ratios
    • understand the key features and relevance of illiquid assets in relation to investment risk: • venture capital • private equity • property
    • understand the concept of correlation of performance between asset classes
    • understand the concept of tracking error
    • know the key features of an investment mandate and its role in risk mitigation
    • understand the main methods used to mitigate investment portfolio risk: • systematic and non-systematic risk • optimisation and diversification • portfolio hedging • short selling • risk transfer
    • understand how timely and accurate monitoring, management and reporting of investments can enhance the risk management process

  • Liquidity Risk (8%)

    • Identification of Liquidity Risk
    • Measurement of Liquidity Risk
    • Management of Liquidity Risk
    • Regulatory requirements
    • understand the basic constituents of liquidity risk and how they can arise within the contexts of credit, market, investment and operational risk: • maturity ladder • actual and contractual cash receipts • asset liquidity risk • funding liquidity risk
    • understand the potential impact of liquidity risk within an individual firm and across the wider financial system
    • understand the importance of funding liquidity risk analysis: • liquidity gap analysis • stress testing • expected future funding requirement
    • know the uses and limitations of the key measures of asset liquidity risk: • bid-offer spread • market depth • immediacy • resilience
    • understand the main ways in which liquidity risk can be managed: • liquidity limits • counterparty credit limits • scenario analysis • liquidity at risk • diversification • behavioural analysis • funding methods
    • be able to calculate a simple example of a cash netting agreement
    • understand the concept and implications of market dislocation
    • understand the key regulatory requirements in relation to liquidity risk

  • Model Risk (4%)

    • Overview of Model Risk
    • know the benefits and limitations of modelling
    • know the major models utilised in operational, credit, market and liquidity risks
    • understand the principles of effective governance of risk modelling
    • understand the risks associated with models developed using AI

  • Risk Oversight and Corporate Governance (5%)

    • Risk Governance within Financial Services Organisations
    • Risk Culture and Leadership
    • understand the general roles, responsibilities and relationships between the principal oversight functions and the role of senior management: • board of directors • risk committee • regulatory oversight
    • understand the principles of the three lines of defence
    • understand the key challenges of implementing risk governance structure, policies and procedures: • appropriate authority and autonomy • segregation of duties • relationship of risk managers to the business
    • know the main factors determining a firm’s risk and control culture: • ownership and involvement • governance and policies • risk appetite / risk tolerance • transparency • integrity, ethics and social responsibility • individual accountability (e.g. Senior Management and Certification Regime) • education and development
    • understand how appropriate management of these factors can add value and reduce risk

  • Enterprise Risk Management (ERM) (6%)

    • Overview of Enterprise Risk Management (ERM)
    • know the definitions of enterprise risk and ERM
    • understand how enterprise risk relates to the process of corporate governance and board responsibilities
    • understand how industry regulation and sound practice have combined to influence the development and implementation of ERM programmes
    • understand the main goals and challenges of establishing and implementing an ERM programme in relation to: • exception-based escalation • aggregation • accountability • ESG risk • Governance, Risk and Compliance (GRC)
    • understand ESG in the context of ERM framework and strategic risk implication
    • know the most relevant business functions that participate in an ERM programme

How to prepare

Work through the topics, read the explanation after each answer, and revisit the areas where you miss questions. Use the official outline and reference materials below to guide your study.

These independent practice questions are not actual exam items and do not guarantee a passing result.

Frequently asked questions

What is the exam format?

Multiple-choice knowledge exam, available by remote invigilation or at computer-based test centres.

How many questions are on the exam?

Total questions: 100–110; Scored questions: 100; Unscored questions: 0–10; The total includes the scored and unscored questions.

How long is the exam?

2 hours for 100 core questions; proportionately more time is allowed for additional CBT trial questions.

What is the passing score?

70%: the Version 12 official sample paper classifies scores 70–100 as Pass and 0–69 as Fail.

How much does the exam cost?

UK prices, 1 April 2026–31 March 2027: exam GBP 283; mandatory workbook GBP 105 separately; saver package GBP 403 (exam, workbook and Revision Express); one-off GBP 68 qualification registration fee when registering the first qualification. Concessionary rates are available for unemployed individuals.

Official sources and references

Confirm current exam arrangements with the exam provider.