A bank implements a new AI trading algorithm. A software bug causes a series of bad trades, creating huge losses. GARP asks you to classify the initial and most direct risk. Is it market risk from the price changes? If your first instinct is "market risk," you've just fallen for one of the most common traps on the FRM Part I exam. The real answer is the key to thinking like a risk manager.
The FRM Part I Foundations of Risk Management domain is the conceptual core of the exam, covering risk types, governance, regulation, and ethics. It accounts for 20% of the score and tests your judgment in classifying risks and applying frameworks to real-world scenarios, not complex calculations.
Key facts
- Official Body
- Global Association of Risk Professionals (GARP)
- Domain Weighting
- 20% of the FRM Part I exam (20 questions)
- Pass Rate
- The FRM Part I pass rate was 50% in May 2024, though it historically averages 45-50% (GARP).
- Recommended Study
- 200-250 hours total for Part I
- Exam Format
- 100 multiple-choice questions over four hours
- Key Focus
- Qualitative understanding of risk classification, governance, and major regulatory frameworks.
What Is the Core Skill in Foundations of Risk Management?
The single most important skill is correctly classifying risks based on their origin. The exam will constantly present scenarios where a single event triggers multiple types of loss, and your job is to identify the initial failure.
This is where candidates lose the most points. They see a loss from market prices moving and select "market risk," but the real question is why the exposure existed. Was it a deliberate trading strategy, or did a system fail?
Let's revisit the opening question. The AI algorithm bug is a failure of an internal system. Therefore, the root cause is operational risk. The market losses are merely the consequence, the channel through which the operational failure manifested.
Studying for FRM Part 1? Benchmark your score in 5 minutes.
Get an instant weak-spot assessment and a custom 12-week study plan PDF generated for your exam window.
A regional bank, "Horizon Financial," suffers a data breach where customer details are stolen due to an unpatched server and weak internal access controls. The bank faces regulatory fines, legal fees, and customer compensation costs.
Step 1: Identify the root cause.
The event originated from an internal system vulnerability (the unpatched server) and a process failure (weak access controls).Step 2: Classify the primary risk.
Based on the official Basel framework, this is a classic operational risk event. It's a loss resulting directly from inadequate or failed internal processes and systems.Step 3: Identify the consequences (the distractors).
- Legal Risk: The fines and lawsuits are a consequence of the operational failure, not the root cause.
- Reputational Risk: The damage to the bank's brand is also a consequence.
- Strategic Risk: Long-term loss of customers is a strategic issue that results from the reputational damage.
On the exam, always trace the problem back to its source. If the source is internal people, processes, or systems, your first thought should be operational risk. This is the kind of judgment VoraPrep's 1,800+ practice questions are designed to build.
Key Risk Types at a Glance
The exam requires you to know the precise definitions of major risk categories. Use this table as a quick reference.
| Risk Type | Definition | Common Exam Scenario |
|---|---|---|
| Market Risk | Risk of losses from changes in market factors like interest rates, stock prices, or foreign exchange rates. | A bond portfolio loses value because the central bank unexpectedly raises interest rates. |
| Credit Risk | Risk of loss if a borrower or counterparty fails to meet their contractual obligations. | A corporate borrower defaults on a loan, and the bank cannot recover the full principal. |
| Operational Risk | Risk of loss from failed internal processes, people, and systems, or from external events. | A "fat-finger" trading error or internal fraud leads to a massive unauthorized position. |
| Liquidity Risk | Funding: Inability to meet payment obligations as they come due. Market: Inability to sell an asset quickly without a significant price discount. | A bank cannot roll over its short-term debt (funding). An asset manager must sell bonds at a deep loss to meet redemptions (market). |
| Legal Risk | Risk of loss from unenforceable contracts, lawsuits, or adverse judgments. | A poorly drafted derivatives contract is ruled invalid by a court, causing a loss. |
| Reputational Risk | Risk of loss to a firm's standing from negative public opinion. Often a consequence of other risk failures. | A bank is implicated in a money-laundering scandal, leading to a loss of clients and business. |
Calculate Your FRM Part 1 Score & Study Hours by Domain
Adjust your practice scores across official FRM Part 1 blueprint domains to predict your pass probability and generate a domain-weighted study schedule.
Must-Know Governance and Regulatory Frameworks
You don't need to be a lawyer, but you must understand the purpose and structure of the key frameworks that govern risk management.
The Three Lines of Defense
This is a fundamental model for risk governance that GARP expects you to know.
- First Line: Business units and functions that own and manage risk directly. (e.g., traders, loan officers).
- Second Line: Risk management and compliance functions that oversee risk. (e.g., the Chief Risk Officer's department).
- Third Line: Internal audit, which provides independent assurance.
Key Regulatory and ERM Frameworks
While the Basel Accords are the most detailed, be aware of these other significant frameworks.
- COSO ERM Framework: A widely accepted framework for Enterprise Risk Management, focusing on strategy, objectives, and performance.
- Sarbanes-Oxley Act (SOX): Enacted after scandals like Enron, it focuses on corporate governance, financial reporting, and internal controls.
- Dodd-Frank Act: A major US regulatory reform after the 2008 financial crisis, addressing systemic risk and consumer protection.
The Basel Accords: A Cheat Sheet
The Basel Accords are the cornerstone of global banking regulation. For the exam, focus on the evolution from Basel II to Basel III.
| Feature | Basel II | Basel III |
|---|---|---|
| Pillar 1 | Minimum capital for Credit, Market, and Operational Risk. | Increased quality and quantity of capital (more Common Equity Tier 1). |
| Pillar 2 | Supervisory review of a bank's internal capital adequacy assessment. | Enhanced to include stress testing and firm-wide governance. |
| Pillar 3 | Market discipline through disclosure requirements. | Expanded disclosure requirements for new capital and liquidity rules. |
| Key Innovation | The three-pillar structure. Standardized vs. internal ratings-based (IRB) approaches for credit risk. | Introduction of global liquidity standards: LCR (Liquidity Coverage Ratio) and NSFR (Net Stable Funding Ratio). |
GARP Code of Conduct: The Non-Negotiable Rules
A surprising number of candidates fail questions on the GARP Code of Conduct because they rely on a general sense of ethics instead of the specific, testable principles. You must know them.
The five core principles are:
- Professional Integrity and Ethical Conduct
- Confidentiality
- Due Care and Prudence
- Transparency
- Professional Competence
Many unofficial study guides provide incorrect mnemonics for the Code. The principles are precise. A useful (and correct) way to remember them could be Professionals Constantly Deliver Transparent Performance.
Why it's tempting: To lump all ethical ideas together. The correct approach: Memorize the exact five principles. Exam questions will test your knowledge of "Transparency" or "Due Care" specifically, and you won't be able to guess your way to the right answer.How to Use This Cheat Sheet Effectively
A cheat sheet is for consolidation, not first-time learning.
First, use it to diagnose your weak spots. Read through the tables and rules. If the distinction between LCR and NSFR is fuzzy, that's your signal to dive back into the core material. VoraPrep's complete course provides textbook-grade lessons for each of these topics, and you can ask Vory, your 24/7 personal tutor, for a step-by-step explanation.
Second, pair it with active practice. Before a block of FRM practice questions, do a five-minute review of this sheet. This primes your brain. After you finish the questions, use this sheet again to analyze your mistakes. Did you fall for the root cause vs. consequence trap? Circle that section here and review it again tomorrow.
This active loop of "review -> practice -> analyze" is far more effective than passively watching hours of video lectures, a common issue with older, more expensive prep courses. You can see how a modern, interactive approach stacks up by comparing VoraPrep with other FRM providers.
Ready to Pass Your FRM Exam? Don't leave your FRM Part I success to chance. VoraPrep offers a complete 6-pillar interactive course designed to help you master every section. Benefit from adaptive learning, 1,800+ practice questions, Vory your 24/7 personal tutor, and a calibrated pass-readiness score predictor.
Visit voraprep.com to get started with a modern, effective way to prepare.
Start Your Free 14-Day Trial at voraprep.com →