Enterprise Risk, Uncertainty and Internal Control
Risk identification, assessment, appetite, response, control design and reporting.
How to study CIMA Management Level
Secure E2, P2 and F2 knowledge before practising integrated medium-term judgement. These single-best-answer study questions do not reproduce or claim to simulate the pre-seen, unseen information, timed written sections, professional formats and human marking of the Management Case Study.
Core concepts
Concept 1
Identify and assess strategic, operational, financial and compliance risks.
Exam cue: State cause, event and consequence rather than a vague risk label.
Concept 2
Select risk responses consistent with appetite and capacity.
Exam cue: Assess inherent risk before existing control and residual risk after it.
Concept 3
Design preventive, detective and corrective controls with clear ownership.
Exam cue: Match control cost and assurance to the exposure.
Risk pitfalls and guardrails
Confusing risk appetite with a numerical risk score.
Guardrail: Check the applicable blueprint, task verb, assumptions, units, timing, evidence provenance, stakeholders and whether the conclusion follows.
Listing a policy as a control without evidence of operation.
Guardrail: Check the applicable blueprint, task verb, assumptions, units, timing, evidence provenance, stakeholders and whether the conclusion follows.
Reporting only average outcome when downside is material.
Guardrail: Check the applicable blueprint, task verb, assumptions, units, timing, evidence provenance, stakeholders and whether the conclusion follows.
Memory anchors
Risk appetite
The amount and type of risk an organisation is willing to pursue or retain.
Residual risk
Risk remaining after controls and responses are applied.
Control design
The specified owner, action, frequency, evidence and escalation for a control objective.
Checkpoint rule
Do the check-up only after you can summarize each concept in one sentence and identify one dangerous pitfall from memory.
Knowledge Check (after reading)
Short check-up to confirm understanding of this module.
Check-up Questions
What is enterprise risk management?
What is risk appetite?
Answer all questions to submit.
Next step personalized recommendations
Continue learning
Move forward only after this module is stable.
What is Pass Harbor?
Completely free exam prep for 247 UK exams.
- Practice questions
- Flashcards
- Study guides
- Mock exams
- No registration
- No paywall
- Start instantly
“No more expensive exam prep. Quality study tools should be accessible to everyone.”