RIMS CRMP COMPLETE STUDY GUIDE WITH CORRECT ANSWERS 2025/2026, Exams of Community Health

Download RIMS CRMP COMPLETE STUDY GUIDE WITH CORRECT ANSWERS 2025/2026 and more Exams Community Health in PDF only on Docsity!

RIMS CRMP COMPLETE STUDY GUIDE

WITH CORRECT ANSWERS

Risks - CORRECT ANSWER-The effect of uncertainty on objectives The chance of something happening that will have an impact on objectives Being prepared for the worst and being poised to exploit opportunities as they are discovered Enterprise Risk Management - CORRECT ANSWER-A strategic business discipline that supports the achievement of an organization's objectives by addressing the full spectrum of its risks and managing the combined impact of those risks as an interrelated risk portfolio. Support Function: Business continuity and crisis management - CORRECT ANSWER-Risk identification, assessment and creation of emergency response and recovery plans related to threats or hazards that might lead to operational disruptions Analysis - CORRECT ANSWER-A systematic examination and evaluation of data or information by breaking it into its component parts to uncover their relationships. An examination of data and facts to uncover and understand cause-effect relationships, thus providing basis for problem solving and decision making. To embed risk management in both routine and strategic decision, what should managers be able to recognize? - CORRECT ANSWER-The type of decision being made; Who should be included in the decision making process; Where in the process decisions are being made

Risk management strategies' general focus - CORRECT ANSWER-Meeting or exceeding an organization's objectives Adhering to control-based objectives, rules and/or controls Complying with regulatory requirements Support Function: Internal Audit - CORRECT ANSWER-Risk identification, assessment and treatment through audit plans with focus on fraud, corruption, regulatory noncompliance and/or misrepresentation related to the organization's internal control systems, financial operations, financial statements and reporting as well as enterprise risk and the organization's risk management framework and process. What steps can the risk management professional take to embed risk management in decision making? - CORRECT ANSWER-Include risk assessment in planning process; Leverage cross-functional risk assessment team and subject matter experts to identify enterprise risks; Consider cascading and cumulative effects Gap Analysis - CORRECT ANSWER-Technique that can be used to determine what steps might need to be taken to improve the organization's capacity to move from a current state to a desired future state. Risk appetite - CORRECT ANSWER-The total exposed amount that an organization wishes to undertake on the basis of risk- return trade-offs for one or more desire and expected outcomes. Communication and Consultation - CORRECT ANSWER-Risk management professional's role in Implementing Risk Strategies Support Function: Legal - CORRECT ANSWER-Risk identification, assessment and treatment of risks related to the

Strategy - CORRECT ANSWER-A complete plan of action for whatever situations might arise in achieving an organization's goals within the established time. Risk tolerance - CORRECT ANSWER-The amount of uncertainty an organization is prepared to accept in total or more narrowly within a certain business unit, a particular risk category or for a specific initiative. Strategic Risk Management - CORRECT ANSWER-A business discipline that drives deliberation and action regarding uncertainties and untapped opportunities that affect an organization's strategy and strategic execution. Value Chain - CORRECT ANSWER-The series of functions, processes, materials and activities (inputs) from concept to the eventual end user that creates and builds value at every step in order to deliver a product or service. To build organizational awareness, the risk management professional needs to do the following: - CORRECT ANSWER- Be a persuasive communicator and facilitator; Have a clear communication plan; Engage interested parties, including primary and secondary audiences; Demonstrate that risk management creates the most value ; Develop feedback loops for continuous learning Risk Analysis - CORRECT ANSWER-The process of characterizing and understanding the nature of risk and of considering the level of risk in the context of the organization's willingness to accept risk. Support Function: Safety - CORRECT ANSWER-Risk identification, assessment and treatment of risks focused on preserving the physical well-being of employees and third parties.

Likelihood, Consequences, other criteria such as timing, duration, vulnerability and interdependencies - CORRECT ANSWER-Risk is typically analyzed on the basis of Support Function: Information Security - CORRECT ANSWER- Risk Identification, assessment and treatment of risk arising our of or affecting information and technology infrastructure. To build organizational awareness, risk management creates the most value when - CORRECT ANSWER-Risk management Aligns with strategic goals; Takes corporate culture into account; Involves key enterprise functions Financial Statements - CORRECT ANSWER-Internal source of information that includes financial analytics or projections strategic planning team - CORRECT ANSWER-The risk manager should be a part of the _______________________ to provide the structure discipline for consideration of risks in a strategic portfolio. Internal Audit Reports - CORRECT ANSWER-Internal source of information that focuses on business practices important to the goals and reflection of regulatory environment of the organization risk management - CORRECT ANSWER- __________________ should be an agenda item at every strategy session. Support Function: Facilities - CORRECT ANSWER-Risk identification, assessment and treatment of the organization's properties, equipment and physical infrastructure systems. Simple and frequent - CORRECT ANSWER-A type of decision that are automatic, taken in the moment. These decisions

Strategic importance and complex - CORRECT ANSWER-A type of decision that call for formal planning process over a longer timeline in which multiple risk management techniques can be applied. Decision quality elements should be embedded in the process. Due to the importance of the decision, biases should be formally considered by the entire planning team. Support Function: Project Management - CORRECT ANSWER-Assess and identify project risks, mitigate threats and capitalize on opportunities that my affect the success of a specific project. Gap analysis - CORRECT ANSWER-determine steps to improve the organization's capacity to move from a current state to a desired, future state. (current available factors, success factors needed to achieve future desired objectives, highlighting the gaps) How to obtain the real story aside from reading information? - CORRECT ANSWER-Talk to those inside the organization; Talk with external stakeholders ; Do site visits assumptions - CORRECT ANSWER-The risk manager can then identify ________________ made by management when developing these goals. Root Cause Analysis - CORRECT ANSWER-multiple techniques designed to identify the underlying or initiating risk sources or drivers. (fault tree analysis, event tree analysis, failure mode and effect analysis and cause-and-effect analysis

• fish bone diagram) Element of decision quality: Frame the issue; identify the need - CORRECT ANSWER-Is solving this problem or realizing this opportunity worthwhile? What are the intended outcomes?

Risk Culture - CORRECT ANSWER-The norms and traditions of behavior of individuals and of groups within an organization that determine the way in which they identify, understand, idsuss and act on the risk organization confronts and takes. Influence analysis/diagrams - CORRECT ANSWER-identify the strength of influencing factors and help determine potential weighting for consideration during the risk assessment process. Define root causes for major risks, define the chain of events likely in a scenario and become the foundation for further modeling. Training needs assessment: Why conduct the training? - CORRECT ANSWER-to tie the performance deficiency to a working need and be sure the benefits of conducting the traiing are greater than the problems being cuased by the performance deficiency. Conduct two types of analysis to answer this question: 1) needs versus wants analysis and 2) feasibility analysis Element of decision quality: Explore doable alternatives - CORRECT ANSWER-What options are available and how effective or disruptive will each one be in solving the problem or realizing the opportunity? What unintended consequences will each alternative create? Knowledge - CORRECT ANSWER-A risk management professional must possess general business acumen to generate conversations that lead to deeper understanding of organizational structure; value chain; market analysis, PESTLE, etc. key risks to each strategic goal - CORRECT ANSWER-The risk manager can then use in-depth risk analysis to assess the __________________ as well as the risks to the successful execution of the strategic plan.

Scenario analysis - CORRECT ANSWER-process of analyzing possible and plausible future events by considering alternative settings, circumstances and outcomes. It provides a basis for making decisions in the context of different conditions. Training needs assessment: How can the performance deficiency be fixed? - CORRECT ANSWER-Can training fix the performance deficiency or suggest other remediation if training is not appropriate? Conduct a performance analysis to identify what skill deficiency is to be fixed by a training remedy. Risk analysis results to - CORRECT ANSWER-determine the risk adjusted probability of achieving strategic objectives; determine the key risks that may negatively or positively affect the achievement of the strategic objectives Synthesize - CORRECT ANSWER-A process of combining information in ways that are coherent, logical and meaningful. Element of decision quality: Understand clearly the values and trade-offs - CORRECT ANSWER-In pursuing each option, what are the consequences of making the trade-offs that will be needed? How clearly is the expected value understood? Training needs assessment: What is the best way to perform? - CORRECT ANSWER-Is there a better or preferred way to do a task to get the best results? Are job performance standards set by the organization? Are thre governmental regulations to consider when completing the task in a required manner? Conduct a task analysis to identify the best way to perform. Site analysis - CORRECT ANSWER-leaders at each site perform an assessment by analyzing and evaluating the potential risks based on what is being produced at the site and its environmental factors. This may include threat, vulnerability and criticality analyses.

Prioritize - CORRECT ANSWER-The step to choose the information that is most relevant, timely, useful and valuable for assessing risks that could affect the organization's objectives. risk register - CORRECT ANSWER-________________ is a tool that can be used to provide an overview or the organization's risk profile aligned to corporate strategy Element of decision quality: Use logical correct reasoning - CORRECT ANSWER-What biases may be influencing reasoning? Training needs assessment: When will training take place? - CORRECT ANSWER-What is the best timing to delivery training? Attendance at training can be impacted by work cycles, holidays and so forth. Conduct a contextual analysis to answer logistic questions. SWOT analysis - CORRECT ANSWER-strengths and weaknesses (internal), opportunities and threats (external) Monte Carlo analysis - CORRECT ANSWER-mathematical technique that generates random variables for modelling risk or uncertainty of a certain system (simulation). The random variables or inputs are modelled on the basis of probability distributions Developing training goals: Align training to specific organizational performance goals - CORRECT ANSWER- Training should directly support specific organization performance goals, such as increasing, revenues, decreasing costs, teaching a new process, launching a new product or complying with regulations. What are the primary risk management skills? - CORRECT ANSWER-Organize and synthesize; Differentiate and prioritize; Employ computer and math skills

knowledge and understanding - CORRECT ANSWER- Organizational risk competency capabilities: _________________ of operations What are the methods of analyzing operations - CORRECT ANSWER-Identify the methods; Compare operations with intended culture and strategy; Validate strong relationship - CORRECT ANSWER-Organizational risk competency capabilities: ________________ with key stakeholders Developing training goals: Determine the learning activities - CORRECT ANSWER-This step involves identifying the activities that will help team members learn how to successfully achieve the specific perfor mance goals. Risk management professional's role: Facilitator - CORRECT ANSWER-encourages participants to share relevant information; provides the team with updates on the changes in the organization; Query and challenge what is said in order to fully develop a concept or issue and explore risks from a 3 60 - degree perspective Influence diagrams, scenario analysis, site analysis, SWOT - CORRECT ANSWER-Examples of qualitative methodology for analyzing data Bowtie, business impact analysis, fault tree, cause/consequence analysis - CORRECT ANSWER-Examples of combined methodology for analyzing data What do learning objectives address? - CORRECT ANSWER- Knowledge, skills or attitudes, what learners will know, such as the elements of risk management process, skills learners can hold, such as those relating to risk appetite and tolerance.

Risk management professional's role: Spectator - CORRECT ANSWER-refrains from influencing a risk dialogue; only take meeting notes or for staff development purposes, provide exposure to the risk management process Conduct Risk - CORRECT ANSWER-Comprises a wide variety of activities and types of behavior that fall outside other main categories of risk ; Risk attached to the way in which a firm, and its staff, behave in a wide range of market-facing and internal situations; How customers are treated, remuneration of staff and how firms deal with conflicts of interest ability to assess and plan - CORRECT ANSWER- Organizational risk competency capabilities: _______________________ for the appropriate number and type of resources necessary to execute a risk strategy and tactical plan Monte Carlo, stress analysis - CORRECT ANSWER-Examples of quantitative methodology for analyzing data How do learning objectives function? - CORRECT ANSWER- Learning objectives are SMART: five characteristics of effective learning objectives are that they are: specific, measurable, achievable, relevant and time bounded. Risk management professional's role: Coordinator - CORRECT ANSWER-arranging logistics of formal risk management planning meetings; set the date, location and agenda; keep team current and engaged; this can include risk updates to support a report, highlight specific risk for comment, detailing successes or adverse events. What are the steps to validate organizational information and behavior against an organization's intended culture? - CORRECT ANSWER-Scrutinize organizational functions;

of risk-return trade-offs for one or more desire and expected outcomes. Coaching - CORRECT ANSWER-Methods of helping others to improve, develop, learn new skills, find success, achieve aims and manage change and challenges. Providing support and advice to an individual or group in order to help them recognize ways to improve their competencies and effectiveness. Active-decision Environment - CORRECT ANSWER-Decision is in the process of being made; RMP should identify the stakeholders, understand success measures; integration of risk management process; develop monitoring process What are the steps in benchmarking? - CORRECT ANSWER- Compare organization with peers and competitors; Differentiate and prioritize to identify peers trusted adivsor - CORRECT ANSWER-Organizational risk competency capabilities: Reputation for being technically risk- savvy and effective at influencing key decisions. Has earned the trust of leadership and decision-makers and is seen as a _____________. To benchmark the organization against its peers and competitors, which information must be obtained? - CORRECT ANSWER-Industry and trade publications; Stock analyst reports for publicly traded companies; Do your own research: Publicly available information such as google trends and prepare and competitive analysis identify, assess and treat risk - CORRECT ANSWER- Organizational risk competency capabilities: Ability to _______________ within a clear appetite and tolerance context.

Risk tolerance - CORRECT ANSWER-is the amount of uncertainty an organization is prepared to accept in total - or more narrowly, within a certain business unit, a particular risk category, or for a specific initiative. Post-decision Environment - CORRECT ANSWER-Decision has already been made; RMP should create a learning environment for stakeholders to identify risks to performance through the execution process; Determine when in execution process risk-based discussions still could be used to favorably impact the outcome ERM integration in organizational strategies: Establish a purpose and value outcome for developing risk management competencies - CORRECT ANSWER-What value outcome will risk management competencies provide for strategy development and performance at strategic, operational and tactical levels? Risk interdependencies - CORRECT ANSWER-are situations where risks can have a cascading effect. Understanding this provides an opportunity to facilitate collaboration among various business units by addressing similar or related risks together. ERM integration in organizational strategies: Establish guiding principles by articulating the organization's risk philosophy - CORRECT ANSWER-Risk philosophy aligned with vision, mission and values; create and protect value Decision Making Environments - CORRECT ANSWER- Decisions can be categorized related to changes in the organization; scope and impact; level of familiarity In benchmarking, you may analyze and compare information and you can look for: - CORRECT ANSWER-Gaps, strengths and weaknesses, differentiators; risks

indemnify and hold another party harmless for specified actions, inactions, injuries or damages. ERM integration in organizational strategies: Determine the risk management strategy that will build organizational competencies in support of the organization's strategy - CORRECT ANSWER-Common definitions, references, measurements and process; improve risk management competencies throughout the organization, iterative plan tasks aligned with organization's planning processs Identify impact in the decision making environment - CORRECT ANSWER-Which decisions make the greatest impact on a specific strategy? Leverage information by using organized internal and external sources; information gathered from meetings; key inputs and outputs of the value chain and operations Qualitative Scoring Method - CORRECT ANSWER-Scoring Method when rating organization against peers based on economic, environmental and philanthropic programs that increase brand quality Core Competency: Attributes - CORRECT ANSWER-Qualities, characteristics and behaviors that, when displayed, will assist risk management professionals in getting things done in areas where they do not hold direct responsibility. These attributes are particularly important when adapting and integrating a horizontal, portfolio approach to risk management across an organization. What are the specific knowledge risk professionals need during benchmarking? - CORRECT ANSWER-Market analysis and environmental scanning; Business acumen-market analysis and value assessment; Due diligence and analytics

Core Competency: Organizational Knowledge - CORRECT ANSWER-Risk management professionals of all levels are expected to know unique aspects of their respective organizations: its industry dynamics, its operating environment, and the activities it undertakes to achieve its strategy, goals and objectives. Hold harmless - CORRECT ANSWER-wording that requires one party to shield the other party from the effects of the legal liability assignable to transferor or obligor. Nine-box approach - CORRECT ANSWER-Approach that facilitates the consideration of the impact of decision within the various stages of decision-making. User knowledge from value chains and series of business processes steps that follow in succession. Tie in to the value creation and the resource of the value chain. Ultimate risk oversight responsibilities - CORRECT ANSWER- Belong at the board level Risk sharing/transfer - CORRECT ANSWER-action taken when i) costs of retaining risk exceeds the organization's risk tolerance; ii) risks or some portion can be transferred at a lower cost, iii) risks should be apportioned based o an agreement and iv) it is required by regulation. Operational risk assessment - CORRECT ANSWER-may be limitd to uncertainties associated with existing operations and operational plans - the assets, processes, people and systems in place - in order to deliver a particular outcome, such as planned earnings. Risk attitude - CORRECT ANSWER-the organization's or individual's view/perspective of the perceived qualitative and quantitative value that may be gained in comparison to the related potential loss or losses.