PRMIA 8020 Exam Questions

Team supervisors play a critical role in shaping and maintaining an organization's risk culture. PRMIA's Risk Governance Framework and Risk Culture Principles emphasize that supervisors act as the link between risk policies and frontline employees, ensuring that risk-aware behaviors are consistently followed.

Step 1: Role of Supervisors in Risk Culture Development

Supervisors engage with employees daily, providing guidance on risk-based decision-making.

They reinforce risk policies, standards, and expectations set by senior management.

Supervisors identify behavioral trends that may indicate risk culture weaknesses.

Step 2: Supervisors as Enforcers of Risk Culture

PRMIA's Risk Culture Framework stresses that risk culture must be embedded into daily operations through supervisor-led enforcement.

Supervisors monitor, correct non-compliant behaviors, and provide ongoing risk awareness training.

Their proximity to employees allows them to detect early warning signs of risk issues.

Step 3: Why the Other Options Are Incorrect

Option A: 'More experienced than the employees that report to them.'

Experience alone does not establish or maintain a risk culture.

A risk culture is about behaviors and practices, not just expertise.

Option B: 'Visible to regulators and can describe the firm's risk culture to inspection teams.'

While supervisors may interact with regulators, their primary role is to engage with employees daily rather than acting as spokespersons.

Option D: 'Visible to regulators and can describe the firm's risk culture to their board.'

Boards typically rely on Chief Risk Officers (CROs) or senior executives to communicate risk culture, not direct supervisors.

PRMIA Risk Reference Used:

PRMIA Risk Culture Framework -- Highlights the role of supervisors in ensuring risk-aware behaviors.

PRMIA Risk Governance Framework -- Stresses that frontline supervisors must enforce risk management policies.

PRMIA Risk Awareness Guidelines -- Reinforces daily interaction as a key factor in maintaining a strong risk culture.

Final Conclusion:

Supervisors directly influence employees' behaviors and ensure that risk culture is consistently followed, making Option C the correct answer.

Definition of Governance

Governance refers to the framework of policies, principles, and processes used to guide corporate decision-making and strategic direction.

It ensures accountability, transparency, and risk oversight within an organization.

Key Elements of Governance

Risk oversight -- Ensuring risks are properly identified and managed.

Accountability structures -- Defining roles and responsibilities.

Decision-making frameworks -- Establishing policies for long-term corporate success.

Why Other Answers Are Incorrect

Option

Explanation

A . Governance is a structure specifying the daily operation of a firm.

Incorrect -- Governance focuses on high-level corporate oversight, not day-to-day operations.

B . Governance is a structure specifying the ways in which reporting is made to the primary regulator.

Incorrect -- Governance is broader than just regulatory reporting.

C . Governance is being replaced by management in all firms that are regulated.

Incorrect -- Governance and management are separate but complementary; governance provides oversight, while management executes strategy.

PRMIA Reference for Verification

PRMIA 10 Principles of Good Governance

Step 1: What Is a Risk Assessment Workshop?

A risk assessment workshop is a structured session where key stakeholders identify, evaluate, and prioritize risks.

Effective workshops require preparation, clear objectives, and structured discussions to ensure meaningful risk analysis.

Step 2: Why Option B is Correct

PRMIA and best practices recommend thorough preparation, including:

Setting objectives

Defining risk categories

Ensuring participation from risk, compliance, and business units

Providing risk assessment tools/templates

Step 3: Why the Other Options Are Incorrect

Option A ('Run spontaneously') Incorrect because lack of preparation leads to poor discussions and missed risks.

Option C ('Risk management should not attend') Incorrect because risk managers provide key expertise to guide discussions.

Option D ('Compliance experts should not attend') Incorrect because compliance provides regulatory insights essential to risk assessment.

PRMIA Risk Reference Used:

PRMIA Risk Assessment Framework -- Recommends structured, well-prepared workshops.

ISO 31000 Risk Management Standard -- Supports proactive workshop planning.

Final Conclusion:

Risk assessment workshops should be well-prepared to ensure meaningful discussions and effective risk identification, making Option B the correct answer.

Step 1: Key Elements of a Well-Designed Policy Document

A well-designed policy should include:

Scope -- Who the policy applies to.

Exception Handling -- How and where exceptions should be requested.

Accountability -- Who is responsible for enforcement.

Step 2: Why Option C is Correct

A policy must clearly define exceptions and the process for requesting them.

It should also define areas where the policy does not apply to avoid confusion.

Step 3: Why the Other Options Are Incorrect

Option A ('List of exceptions for board members' families') Incorrect because policies should apply consistently to all stakeholders.

Option B ('List of acceptable fonts and margin types') Incorrect because formatting is secondary to content clarity.

Option D ('To whom the policy applies and an additional management report') Incorrect because policy scope should not include unnecessary reports.

PRMIA Risk Reference Used:

PRMIA Policy Writing Guidelines -- Defines policy structure and exception handling.

ISO 19600 Compliance Management Standard -- Supports clear, well-documented policies.

Final Conclusion:

A well-designed policy clearly defines exceptions and their handling process, making Option C the correct answer.

Definition of an Effective Key Risk Indicator (KRI)

A KRI is a metric used to identify, measure, and monitor emerging risks.

To be effective, KRIs must be both quantitative and qualitative, allowing for a comprehensive risk view.

Key Characteristics of Effective KRIs

Quantitative -- Uses numerical data for trend analysis.

Qualitative -- Incorporates expert judgment and scenario-based insights.

Consistent -- Maintains uniform definitions across reporting periods.

Efficient & Repeatable -- Must be easily measured and consistently reported.

Why Other Answers Are Incorrect

Option

Explanation

B . Qualitative, Consistent, Efficient & Repeatable.

Incorrect -- Excludes quantitative aspects, which are essential for KRIs.

C . Quantitative, Consistent, Comparable, Efficient & Repeatable.

Incorrect -- While comparison is useful, qualitative factors are missing, making this answer incomplete.

D . Quantitative, Repeatable and Efficient.

Incorrect -- Lacks qualitative insights and consistency as key factors for KRIs.

PRMIA Reference for Verification

PRMIA Risk Indicator Guidelines

Basel Committee's Principles on Risk Data and KRI