PRMIA 8020 Exam Questions

Definition of Governance

Governance refers to the framework of policies, principles, and processes used to guide corporate decision-making and strategic direction.

It ensures accountability, transparency, and risk oversight within an organization.

Key Elements of Governance

Risk oversight -- Ensuring risks are properly identified and managed.

Accountability structures -- Defining roles and responsibilities.

Decision-making frameworks -- Establishing policies for long-term corporate success.

Why Other Answers Are Incorrect

Option

Explanation

A . Governance is a structure specifying the daily operation of a firm.

Incorrect -- Governance focuses on high-level corporate oversight, not day-to-day operations.

B . Governance is a structure specifying the ways in which reporting is made to the primary regulator.

Incorrect -- Governance is broader than just regulatory reporting.

C . Governance is being replaced by management in all firms that are regulated.

Incorrect -- Governance and management are separate but complementary; governance provides oversight, while management executes strategy.

PRMIA Reference for Verification

PRMIA 10 Principles of Good Governance

Overview of Basel II Approaches for Operational Risk

Basel II introduced three main approaches to calculating capital requirements for operational risk:

Basic Indicator Approach (BIA)

The Standardized Approach (TSA)

Advanced Measurement Approach (AMA)

Why Answer D is Correct

Alternative Measurement Approach (AMA) is not a recognized Basel II approach.

The correct term under Basel II was Advanced Measurement Approach (AMA).

Why Other Answers Are Incorrect

Option

Explanation

A . Basic Indicator Approach (BIA).

Correct -- A simple approach where capital is set as a fixed percentage of gross income.

B . The Standardized Approach (TSA).

Correct -- Categorizes operational risk into business lines, each with assigned risk factors.

C . Advanced Measurement Approach (AMA).

Correct -- Uses internal models to calculate capital requirements based on loss data, scenario analysis, and risk controls.

PRMIA Reference for Verification

Basel II Framework for Operational Risk (2004)

PRMIA Risk Management Guidelines

A Chief Risk Officer (CRO) plays a crucial role in shaping and strengthening the risk culture within an organization. PRMIA defines risk culture as the shared values, beliefs, knowledge, and understanding about risk that drive behaviors within an institution.

Setting a Clear Vision

The CRO should communicate a vision of risk management that aligns with organizational goals while ensuring that risk-taking remains within acceptable limits.

The vision should be achievable and realistic, rather than overly ambitious, which could incentivize reckless risk-taking.

Embedding Risk Awareness into Decision-Making

A strong risk culture ensures that risk considerations are embedded into business decision-making rather than treated as a separate compliance exercise.

This is supported by PRMIA's Enterprise Risk Management (ERM) Framework, which stresses integrating risk management into strategy and operations.

Avoiding a Blame Culture

A risk-aware organization promotes accountability without fear, enabling employees to report risks without retribution.

Option B (Discourage personal accountability to avoid a blame culture) is incorrect because personal accountability is essential for a healthy risk culture.

Avoiding a Strict, Prescriptive Approach

A set of rigid objectives that must be followed by the executive team (Option C) does not foster a dynamic, evolving risk culture.

Instead, risk culture should be flexible and adaptive to emerging risks.

Balancing Incentives and Consequences

While balancing rewards with penalties (Option D) is part of governance, a strong risk culture is not built solely through fear of punishment.

PRMIA emphasizes positive reinforcement, such as linking risk management behaviors to performance evaluations and incentives.

PRMIA Reference for Verification

PRMIA Risk Governance Framework -- Discusses the role of leadership in shaping risk culture.

PRMIA Standards on Enterprise Risk Management (ERM) -- Covers best practices for embedding risk culture within organizations.

Step 1: Role of a Risk Function

A Risk Function ensures that an organization follows best practices in risk governance, assessment, and control implementation.

It should be aligned with the board's risk strategy and ensure independent oversight.

Step 2: Why Option B is Correct

The board sets the overall risk strategy, and the risk function implements risk controls accordingly.

PRMIA emphasizes board oversight as the guiding force behind risk management.

Step 3: Why the Other Options Are Incorrect

Option A ('Implement management's direction') Incorrect because risk oversight should be board-driven, not solely management-driven.

Option C ('Ensure opinions are listened to') Incorrect because risk functions enforce policies, not just share opinions.

Option D ('Lower risk-taking to zero') Incorrect because risk-taking is necessary for growth---excessive risk aversion harms business.

PRMIA Risk Reference Used:

PRMIA Risk Governance Framework -- Highlights board oversight in risk management.

Basel III Risk Management Standards -- Emphasizes board-driven risk controls.

Final Conclusion:

The Risk Function must follow the board's direction in implementing risk controls, making Option B the correct answer.

Step 1: What Is a Risk Assessment Workshop?

A risk assessment workshop is a structured session where key stakeholders identify, evaluate, and prioritize risks.

Effective workshops require preparation, clear objectives, and structured discussions to ensure meaningful risk analysis.

Step 2: Why Option B is Correct

PRMIA and best practices recommend thorough preparation, including:

Setting objectives

Defining risk categories

Ensuring participation from risk, compliance, and business units

Providing risk assessment tools/templates

Step 3: Why the Other Options Are Incorrect

Option A ('Run spontaneously') Incorrect because lack of preparation leads to poor discussions and missed risks.

Option C ('Risk management should not attend') Incorrect because risk managers provide key expertise to guide discussions.

Option D ('Compliance experts should not attend') Incorrect because compliance provides regulatory insights essential to risk assessment.

PRMIA Risk Reference Used:

PRMIA Risk Assessment Framework -- Recommends structured, well-prepared workshops.

ISO 31000 Risk Management Standard -- Supports proactive workshop planning.

Final Conclusion:

Risk assessment workshops should be well-prepared to ensure meaningful discussions and effective risk identification, making Option B the correct answer.