Review a compact CISI Risk in Financial Services cheat sheet for operational, credit, market, liquidity, investment, model, governance, oversight, and ERM traps before Finance Prep practice.
Use this CISI Risk in Financial Services cheat sheet as a risk-type and governance checklist before mixed practice. The exam usually rewards the answer that identifies the risk type, owner, control failure, and escalation level rather than applying one generic “risk management” response.
| Item | CISI Risk cue |
|---|---|
| Provider | CISI |
| Exam | Risk in Financial Services |
| Format | 100 multiple-choice questions in 120 minutes |
| Main practice behavior | identify risk types, governance responsibilities, control responses, and enterprise-risk tradeoffs |
| Finance Prep status | live practice available |
| Area | What to know | Common trap |
|---|---|---|
| Risk principles | appetite, tolerance, capacity, culture, controls, three lines | confusing a formal statement with actual behavior |
| International regulation | capital, liquidity, conduct, systemic-risk, supervisory themes | memorizing names without knowing control purpose |
| Operational risk | process failure, people, systems, cyber, outsourcing, incidents | calling every event market or credit risk |
| Credit risk | default, counterparty, exposure, collateral, concentration | focusing only on borrower failure |
| Market risk | rates, equity, FX, commodity, volatility, VaR-style thinking | treating all price movement as investment risk |
| Investment risk | portfolio volatility, concentration, benchmark, client exposure | ignoring mandate and objective |
| Liquidity risk | funding liquidity, market liquidity, stress, cash-flow pressure | assuming liquid assets always sell at fair value |
| Model risk | data, assumptions, validation, limitations, governance | trusting output because the model is complex |
| Governance and oversight | board, senior management, risk committees, reporting, challenge | assigning ownership to the wrong level |
| ERM | enterprise view, aggregation, risk appetite, stress, culture | managing each risk silo in isolation |
After each set, sort misses into risk identification, ownership, control response, or governance escalation. If you can name the risk but cannot name the owner or control response, drill the topic page before another full diagnostic.