CMA Final · Strategic Performance Management and Business Valuation
Corporate Risk Management Performance for CMA Final Paper 20A
Corporate risk management performance is how a firm identifies, assesses, responds to and governs risk, then checks whether those efforts work. For Paper 20A, learn the framework and COSO ERM first, then techniques, responses, governance and metrics. Answer cases with a clear risk, a measure, a response and a recommendation.
What this chapter covers
This chapter in Paper 20A Strategic Performance Management and Business Valuation covers risk as a managed part of strategy, not as a list of threats. You start with the framework: what risk is, its types, and how a firm sets risk appetite. You then study enterprise risk management under the COSO ERM approach, which links risk to strategy and performance.
The middle of the chapter is practical. You learn to assess and measure risk, choose a response (avoid, reduce, share or accept, and use hedging where relevant), and fix who is responsible through governance and risk officers. The last topic closes the loop: how you know the risk management is working.
The chapter connects to the rest of the paper through performance measurement and valuation. Risk changes the cash flows and the discount rate used in valuation. Risk indicators sit beside financial and non-financial performance measures. A case in this chapter can therefore ask for a number, a judgement and a recommendation together.
Paper 20A has a compulsory Section A with 10 standalone MCQs and one case scenario with 5 MCQs, and the remaining 70 marks are descriptive and numerical questions. This chapter suits both. Its concepts give quick MCQ marks, and its application questions reward structured answers. Many students skip it as theory-heavy, so a clear method gives you an edge. It also supports your valuation and performance answers elsewhere in the paper.
Corporate Risk Management Performance: topics in the order to study them
- 1Corporate Risk Management FrameworkIt defines risk, types, appetite and process, which every later topic uses.
- 2Enterprise Risk Management (COSO ERM)It gives the standard structure that links risk to strategy, so learn it before the tools.
- 3Risk Assessment and Measurement TechniquesYou need to identify and measure risks before you can choose a response.
- 4Risk Response, Mitigation and HedgingResponses depend on the assessed size of the risk and the appetite set earlier.
- 5Risk Governance and Role of Risk OfficersIt assigns ownership of the process you have now learned, including board and officer roles.
- 6Measuring Risk Management PerformanceIt comes last because it judges the whole system, using everything before it.
How to prepare Corporate Risk Management Performance
Treat this chapter as one chain: set up, assess, respond, govern, measure. Study it in that chain so each answer follows the same logic.
- Read the framework topic and write a one-page summary of risk types, appetite and the process steps in your own words.
- Learn the COSO ERM components and principles as a structured list, then practise explaining how each links risk to strategy and performance.
- Practise the measurement techniques with small numerical examples. Recompute each one until the steps are automatic.
- Build a response table for each risk type: the options, an example, and when each option suits. Include hedging instruments you have studied.
- Write short notes on governance roles: board, risk committee, chief risk officer. Say who owns what.
- Finish with risk performance measures. Then solve past case-style questions, ending each answer with a recommendation.
- Revisit the chapter weekly with 15 MCQs on your phone, checking why each wrong option is wrong.
Common mistakes in Corporate Risk Management Performance
Listing definitions without applying them to the case.
Fix: Name the risk from the case, state the measure, choose a response and justify it with case facts.
Confusing risk appetite with risk tolerance.
Fix: Write appetite as the broad level of risk you accept, and tolerance as the acceptable variation around objectives. Use the two terms separately.
Treating ERM as only a compliance or internal control exercise.
Fix: Always connect ERM to strategy, performance and value creation in your answer.
Choosing hedging for every risk.
Fix: Match the response to the risk. Hedging suits market price exposures; operational or strategic risks often need other responses.
Ignoring who owns the risk.
Fix: Add one line on ownership and reporting to the board or committee in every governance answer.
Giving performance measures with no link to objectives or appetite.
Fix: Say what each measure is compared with, such as a limit, a target or earlier periods, and what action follows.
Last-day revision: Corporate Risk Management Performance
- Risk is uncertainty that can affect objectives, with both downside and upside effects.
- Risk appetite is the amount of risk the firm is willing to accept in pursuit of its objectives.
- COSO ERM links risk management with strategy setting and performance, not only with compliance.
- Identify first, then assess likelihood and impact, then rank and respond.
- Four basic responses: avoid, reduce, share or transfer, and accept.
- Hedging reduces exposure to price risks such as currency, interest rate or commodity movements.
- The board oversees risk; management owns and runs the risk process.
- A risk officer coordinates and reports on risk but does not replace the risk owners in business units.
- Good risk measures are linked to objectives and compared with appetite and tolerance.
- Risk adjustments in valuation can enter through cash flows or the discount rate; avoid doing both for the same risk.
- End every case answer with a clear recommendation and a reason.
Corporate Risk Management Performance practice questions
- Which risk response is being used when a company enters a fixed-price forward contract to eliminate uncertainty in its future import payment…
- A portfolio has a one-day 99% Value at Risk (VaR) of Rs 4,00,000. Assuming returns are independent and normally distributed with zero mean, …
- Surya Textiles estimates a risk event with a 20% probability of occurring in a year and an impact of Rs 50 lakh if it occurs. Insurance cove…
- Which of the following is an example of risk transfer rather than risk avoidance, reduction or retention?
- In corporate risk management, which statement best describes 'risk appetite' of an organisation?
- Kaveri Pharma's risk-adjusted performance is measured by RAROC. A division earns net risk-adjusted income of Rs 18 crore after expected loss…
- In corporate risk management, which term describes the level of risk an organisation is prepared to accept in pursuit of its strategic objec…
- In enterprise risk management, a firm's 'risk appetite' is best described as:
Corporate Risk Management Performance in other exams
The same ground in other exams, if you are preparing for more than one or want another angle on it.
Corporate Risk Management Performance: frequently asked questions
Which paper contains Corporate Risk Management Performance?
This chapter is in Paper 20A Strategic Performance Management and Business Valuation, one of the electives. You choose the elective at the time of enrolment for the Final Course.
Is this chapter more theory or numerical?
It is mostly conceptual with some measurement work. Expect case-based questions where you must apply ideas, so prepare a few numerical examples as well as notes.
How should I study COSO ERM?
Learn its components and principles as a structured list. Then practise explaining each in a short case, showing how it links risk to strategy and performance.
How do I answer a risk case question?
Identify the risk, measure or rank it, pick a response, state who owns it, and end with a recommendation. This structure keeps the answer short and complete.
Is there negative marking in the MCQs?
Neither the question papers nor the ICMAI prospectus provide for negative marking. Still, attempt only after eliminating options, since each MCQ carries 2 marks.