I11 Introduction to Risk Management
Risk concepts, identification, analysis, evaluation and treatment, practical risk-management systems, culture and business continuity.
How to study a flexible CII Certificate route
Confirm the units on your Learning Statement first, study the core route before its options, and prepare to the current syllabus and exam guide for each selected unit.
Core concepts
Concept 1
Risk includes threats and opportunities and is described through causes, events, consequences, likelihood and impact.
Exam cue: Write the risk clearly before choosing a control or financing method.
Concept 2
Identification and analysis support evaluation against risk appetite, tolerance and criteria before a treatment is selected.
Exam cue: Separate inherent risk, controls, residual risk and the decision about whether more treatment is needed.
Concept 3
Treatment may avoid, reduce, transfer, retain or exploit risk, while monitoring, communication and business continuity support resilience.
Exam cue: Connect continuity arrangements with critical activities, dependencies, recovery priorities and testing.
Risk pitfalls and guardrails
Treating all risk as negative or all transfer as insurance.
Guardrail: Do not mix routes, units, jurisdictions, policy sections or current and withdrawn rules merely because the terminology sounds similar.
Using a risk score without understanding the assumptions behind likelihood and impact.
Guardrail: Do not mix routes, units, jurisdictions, policy sections or current and withdrawn rules merely because the terminology sounds similar.
Writing a continuity plan without testing, ownership or current dependency information.
Guardrail: Do not mix routes, units, jurisdictions, policy sections or current and withdrawn rules merely because the terminology sounds similar.
Memory anchors
Risk Description
State cause, uncertain event and consequence so the risk can be analysed and owned.
Inherent and Residual
Inherent risk exists before controls; residual risk remains after controls.
Evaluate
Compare analysed risk with appetite, tolerance and criteria before deciding treatment.
Treatment Choices
Avoid, reduce, transfer, retain or pursue risk according to objectives and cost.
Risk Cycle
Identify, analyse, evaluate, treat, monitor and communicate as a continuing process.
I11 Assessment
The current I11 exam is 75 MCQs in two hours.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
Which description best reflects modern enterprise risk management?
What is risk appetite?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 247 UK exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”