Skip to content

Strategic Performance Management and Business Valuation · Corporate Risk Management Performance

Risk Assessment and Measurement Techniques for CMA Final

Updated 11 October 2026 · Fact-checked

Risk assessment techniques rank and size risks. Qualitative tools, such as the risk matrix, score likelihood and impact. Quantitative tools measure effect on value: sensitivity analysis changes one variable, scenario analysis changes several together, simulation uses probability distributions, and Value at Risk gives a loss limit at a confidence level.

Understand Risk Assessment and Measurement Techniques

Risk assessment answers two questions: how likely is an event, and how much will it hurt? You cannot manage every risk, so you first rank them. Measurement then puts numbers on the important ones.

Qualitative tools use judgement. The risk matrix (heat map) plots likelihood on one axis and impact on the other. Each risk gets a score, often likelihood × impact on a 1-5 scale. High scores need action first. It is quick and easy to explain, but scores are subjective and cannot be added up.

Quantitative tools use numbers. Sensitivity analysis changes one input at a time (say, selling price by 10%) and shows how much the result (NPV, profit) moves. Scenario analysis changes a set of linked inputs together to build cases such as best, base and worst. You can weight scenarios by probability to get an expected value. Simulation (Monte Carlo) draws thousands of random values for the inputs from assumed distributions and gives a distribution of outcomes, not a single figure.

Value at Risk (VaR) states the maximum loss expected over a period at a given confidence level, under normal market conditions. A one-day 95% VaR of ₹10 lakh means that on 95% of days the loss should not exceed ₹10 lakh. It says nothing about how bad the loss is on the other 5% of days. Under the parametric (variance-covariance) method, VaR = z × σ × portfolio value, for returns assumed normal.

Choose the tool by purpose. Use the matrix to screen, sensitivity to find key drivers, scenarios for strategic what-ifs, simulation for complex uncertainty, and VaR for market risk limits.

Key rules to remember

Risk score
Risk score = Likelihood score × Impact score
Used in a risk matrix. Scales (for example 1-5) are set by the entity.
Expected value of scenarios
EV = Σ (probability × outcome)
Probabilities must add up to 1.
Sensitivity measure
% change in output ÷ % change in input
A larger ratio means the output is more sensitive to that input.
Parametric VaR
VaR = z × σ × Value of position
σ is the standard deviation of returns for the period. Assumes normally distributed returns.
Scaling VaR over time
VaR (T days) = VaR (1 day) × √T
Valid under the usual assumption of independent daily returns and zero mean.
Common z values
95% → 1.645; 99% → 2.33 (approx.)
One-tailed values for VaR.

How to solve Risk Assessment and Measurement Techniques questions

Use this order for any question on risk assessment, qualitative or numerical.

  1. 1Identify the type of question: ranking risks, testing one variable, testing a combined case, or a loss limit (VaR).
  2. 2For a risk matrix, score likelihood and impact for each risk, multiply, and rank from highest to lowest.
  3. 3For sensitivity, change one variable at a time, hold others fixed, recompute the output and state the percentage change.
  4. 4For scenarios, compute the output in each case, multiply by probability and add up to get the expected value.
  5. 5For VaR, pick z for the confidence level, take σ for the holding period, and multiply by the position value.
  6. 6Adjust the time horizon with √T if the data is daily and the period is longer.
  7. 7State the result in words with the confidence level and period, then give a recommendation.
  8. 8Add one line on limitations of the tool used.

Quickest way: Pick the tool, then compute in three lines

When to use it: Use under time pressure when the question gives data and asks for a figure plus comment.

  1. Underline the confidence level, period, and whether one or many variables change.
  2. Write the formula first, then substitute. Method marks are safe even if arithmetic slips.
  3. Finish with a one-sentence interpretation and one limitation.

Common mistakes in Risk Assessment and Measurement Techniques

  • Treating sensitivity and scenario analysis as the same

    Both are what-if tests.

    Fix: Sensitivity moves one variable at a time. Scenario moves several linked variables together.

  • Reading 95% VaR as the maximum possible loss

    The word 'maximum' misleads.

    Fix: Say the loss should not exceed VaR with 95% confidence. In the other 5% of cases, loss can be larger.

  • Not scaling σ to the holding period

    Students use daily σ for a 10-day VaR.

    Fix: Multiply by √T, here √10, when returns are assumed independent.

  • Using the wrong z value

    Mixing one-tailed and two-tailed values.

    Fix: Use 1.645 for 95% and about 2.33 for 99% in VaR.

  • Adding risk matrix scores as exact money values

    Scores look numerical.

    Fix: Treat them as relative rankings only, not rupee losses.

  • Giving a number with no recommendation

    Students stop after the calculation.

    Fix: Always conclude: accept, mitigate, or reject, with reason.

Worked examples

Example 1

A portfolio is worth ₹5,00,00,000. Daily return standard deviation is 1.2%. Compute the one-day 95% VaR and the 10-day 95% VaR (z = 1.645, returns normal and independent).

Show the solution
  1. One-day VaR = 1.645 × 1.2% × ₹5,00,00,000.
  2. 1.2% of ₹5,00,00,000 = ₹6,00,000.
  3. 1.645 × ₹6,00,000 = ₹9,87,000.
  4. 10-day VaR = ₹9,87,000 × √10 = ₹9,87,000 × 3.1623 ≈ ₹31,21,000.

Answer: One-day 95% VaR is ₹9,87,000. Ten-day 95% VaR is about ₹31,21,000. With 95% confidence, losses should not exceed these amounts over those periods; the remaining 5% is not covered.

Example 2

A project has three scenarios: Best (probability 0.2) NPV ₹80 lakh; Base (0.5) NPV ₹30 lakh; Worst (0.3) NPV -₹40 lakh. Find the expected NPV and comment.

Show the solution
  1. Best: 0.2 × 80 = 16 lakh.
  2. Base: 0.5 × 30 = 15 lakh.
  3. Worst: 0.3 × (-40) = -12 lakh.
  4. Expected NPV = 16 + 15 - 12 = 19 lakh.

Answer: Expected NPV is ₹19 lakh, which is positive, so the project is acceptable on expected value. There is a 30% chance of a loss of ₹40 lakh, so the board should confirm it can bear that downside or plan mitigation.

Exam tips

  • MCQs often test definitions: which tool changes one variable (sensitivity) and which uses random draws (simulation).
  • In numerical questions, show z, σ and position value separately so method marks are clear.
  • Always state the confidence level and period when quoting VaR.
  • In case answers, name the tool, apply it to the case facts, then give a recommendation and a limitation.

Practice questions from Corporate Risk Management Performance

Risk Assessment and Measurement Techniques in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Risk Assessment and Measurement Techniques: frequently asked questions

What is the difference between sensitivity analysis and scenario analysis?

Sensitivity analysis changes one input at a time to see its effect on the result. Scenario analysis changes a group of related inputs together to describe a complete situation such as best or worst case.

How do I calculate Value at Risk in the exam?

Use VaR = z × σ × position value. Take z from the confidence level and σ for the holding period. If σ is daily, multiply by √T for a longer period.

What does a 99% VaR of ₹2 crore mean?

It means that, under normal market conditions, the loss over the stated period should not exceed ₹2 crore with 99% confidence. It does not tell you how large the loss could be in the remaining 1% of cases.

What is a risk matrix and how is it read?

It is a grid of likelihood against impact. Risks in the high-likelihood, high-impact corner are the top priority. Scores show relative ranking, not rupee loss.