Skip to content

FRM Part II · FRM Exam Part II

Integrated Risk Management for FRM Part II

Integrated risk management means measuring, governing and managing all of a firm's risks together, not one silo at a time. You solve questions by naming the framework or measure, applying the method (aggregate, allocate, stress), and interpreting the result against risk appetite and capital.

What this chapter covers

This chapter treats the firm as one balance sheet facing market, credit, operational and liquidity risk at the same time. It covers the enterprise risk management (ERM) framework, how the board sets risk appetite, how separate risks are combined into one number, how economic capital is set and allocated to business lines, how stress tests work across risks, and what risk culture and past failures teach.

The chapter sits above the other topics in Part II. Market, credit, operational and liquidity risk each give you a measure for one risk type. Here you learn how those measures are added up, where diversification does and does not help, and how senior management and the board use them to decide on capital, limits and strategy.

It also links to Risk Management and Investment Management and to Current Issues. Concentration, correlation breakdown, model risk and weak governance appear in all of them. If you understand the integrated view, case-style questions become easier because you can see which risk interacts with which.

Questions here are applied and case-like: a firm has a risk profile, a governance gap or a stress result, and you must pick the right interpretation. The material is conceptual, so with a clear framework you can answer quickly and save time for calculation-heavy chapters. The same ideas, such as correlation, tail dependence, capital and governance, also help you eliminate wrong options in other Part II topics, so effort here pays back across the paper.

Integrated Risk Management: topics in the order to study them

  1. 1Enterprise Risk Management FrameworkIt gives the vocabulary and structure (identify, assess, respond, monitor) that every later topic builds on.
  2. 2Risk Appetite and Risk GovernanceAppetite and governance show who sets limits and who is accountable, which frames how aggregation and capital are used.
  3. 3Risk Aggregation and Risk IntegrationYou need the idea of combining risks, correlation and diversification before you can understand capital numbers.
  4. 4Economic Capital and Capital AllocationIt uses aggregated risk to set capital and allocate it to units, so it follows aggregation.
  5. 5Stress Testing and Scenario Analysis Across RisksStress tests challenge the aggregation and capital results, so they come after you know how those are built.
  6. 6Risk Culture and Lessons from Risk FailuresCase lessons are easiest to learn last, when you can tie each failure to a framework, governance or model gap you already know.

How to prepare Integrated Risk Management

This chapter rewards understanding over memorising. Build one mental map first, then practise applying it to short cases.

  1. Read the topics in the study order and write a one-page map: framework, appetite, aggregation, capital, stress, culture.
  2. For each topic, list the key terms in your own words and what problem each one solves.
  3. For aggregation, practise simple two-risk examples so you can see how correlation changes the combined figure, and note when the simple sum overstates or understates risk.
  4. For economic capital, be clear on the confidence level, the time horizon and what loss the capital is meant to cover, and how allocation to business units differs from stand-alone capital.
  5. Do practice MCQs in short sets. After each wrong answer, write which concept you confused and why the right option fits the case.
  6. For failures, build a small table in your notes: event, risk type, governance or culture cause, lesson. Review it twice before the exam.
  7. In the last week, redo only the questions you missed and read the quick revision points.

Common mistakes in Integrated Risk Management

  • Adding stand-alone risk numbers and calling it total risk

    Fix: Ask what correlation is implied. State whether the sum is an upper bound and why aggregation methods may still miss tail dependence.

  • Mixing up risk appetite, risk tolerance and risk limits

    Fix: Treat appetite as the broad level of risk the firm seeks, tolerance or limits as the specific boundaries, and check how the question defines each.

  • Confusing economic capital with regulatory capital

    Fix: Remember economic capital is internal, based on the firm's own risk model, confidence level and horizon, while regulatory capital follows prescribed rules.

  • Treating stress testing as a one-off calculation

    Fix: Link every stress test to governance: who reviews it, what actions it triggers, and how it feeds appetite and capital planning.

  • Blaming failures only on models

    Fix: Look for governance, incentive and culture factors too. Many case questions have the answer in oversight, escalation or ignored limits.

  • Memorising lists without applying them to a case

    Fix: Practise case MCQs. For each, name the concept, the weakness in the scenario, and the best remedy.

Last-day revision: Integrated Risk Management

  • ERM looks at all risks together, with board oversight and a link to strategy.
  • Risk appetite is the amount and type of risk a firm is willing to take; limits translate it into daily practice.
  • The board sets appetite and oversees; management implements; independent risk functions challenge.
  • Three lines of defence: business units, independent risk and compliance, internal audit.
  • Simple addition of stand-alone risks ignores diversification and usually overstates total risk when correlations are below one.
  • Correlations tend to rise in stress, so diversification benefits can shrink when you need them most.
  • Economic capital is the buffer an institution estimates it needs to absorb unexpected losses at a chosen confidence level and horizon.
  • Regulatory capital follows rules; economic capital is the firm's own internal estimate.
  • Capital allocation to units should reflect their risk contribution, not only stand-alone risk.
  • Stress tests should be forward-looking, link to the business model and combine risk types.
  • Reverse stress testing starts from a failure outcome and works back to the scenarios that cause it.
  • Weak risk culture, poor incentives and ignored warnings are recurring causes in risk failures.

Integrated Risk Management practice questions

Integrated Risk Management in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Integrated Risk Management: frequently asked questions

Is Integrated Risk Management a calculation-heavy chapter in FRM Part II?

Mostly it is conceptual, with some simple numerical reasoning on aggregation and capital. You should be comfortable with correlation and diversification logic. Focus on interpreting results rather than long calculations.

How does this chapter connect to the other Part II topics?

It brings together the market, credit, operational and liquidity risk measures. It shows how they are combined, governed and tested at firm level. The same ideas of correlation, concentration and governance also appear in the Current Issues and investment management readings.

What is the best way to study risk failures for the exam?

Do not memorise stories. For each case, note the risk type, the governance or culture weakness, and the lesson. Then practise recognising the same pattern in new scenarios.

How many questions will come from this chapter?

GARP does not publish a fixed question count per chapter for you to rely on. The exam has 80 equally weighted multiple-choice questions across six topics. Prepare this chapter well, since its ideas also help in other topics.