Skip to content

FRM Part II · FRM Exam Part II

Risk, Regulation and Organizational Structure for FRM Part II

This chapter covers how a financial firm is governed, how much risk it will accept, and how regulators force it to hold capital and liquidity. You solve questions by naming the right body or Basel measure, applying the rule exactly, and interpreting what it means for the firm or the system.

What this chapter covers

This chapter explains the framework in which every other risk is managed. It starts inside the firm: the board, its committees, the chief risk officer, the risk appetite statement and the culture that decides whether limits are respected. It then moves outside the firm to the Basel framework, stress testing, and the post-crisis regulatory response to systemic risk.

Think of it as the rules of the game. Market, credit, operational and liquidity risk chapters tell you how to measure a risk. This chapter tells you who owns that risk, how much of it is allowed, and how much capital or liquid assets must stand behind it.

It links directly to the rest of Part II. Basel capital rules reappear in credit and market risk. Liquidity ratios connect to the liquidity and treasury topic. Stress testing and systemic risk feed into Current Issues, such as private credit, rising government debt and digital assets. Questions are applied and case-like, so you need to name the concept precisely and interpret it.

The exam has 80 equally weighted multiple-choice questions in 4 hours, so every concept you master is worth the same as any other. This chapter is rich in definitions, ratios and roles that can be answered quickly and accurately once you know them, which saves time for the long calculation questions elsewhere. Its ideas also support questions in other topics, so the effort pays back more than once. Many candidates treat governance and regulation as light reading and lose easy marks through imprecise wording.

Risk, Regulation and Organizational Structure: topics in the order to study them

  1. 1Risk Governance and Board OversightStart with who is accountable for risk. Every later topic assumes you know the roles of the board, committees and the CRO.
  2. 2Risk Appetite Frameworks and Risk CultureAppetite is how the board turns its oversight into limits, so it follows governance directly.
  3. 3Organizational Structure and Conflicts of InterestIt builds on governance and appetite by showing how lines of defense, reporting lines and incentives help or weaken control.
  4. 4Basel Framework: Capital and Liquidity RegulationThis is the largest rule-based topic. By now you understand the internal view, so the external requirements make sense.
  5. 5Stress Testing and Capital PlanningStress tests check whether capital and liquidity hold up in bad scenarios, so you need the Basel basics first.
  6. 6Systemic Risk and Post-Crisis RegulationFinish with the system-wide view. It ties together the earlier topics and links to Current Issues.

How to prepare Risk, Regulation and Organizational Structure

This chapter rewards precise recall and clear interpretation more than heavy calculation. Use a cycle of learn, test and revise.

  1. Read the topics in the study order above and write a one-page summary for each in your own words.
  2. Make a list of roles and bodies, such as the board, risk committee, CRO and regulators, with one line on what each is responsible for.
  3. For Basel, build a table on paper of each capital and liquidity measure: what it measures, the numerator, the denominator and the purpose. Learn the definitions exactly as the readings present them.
  4. Practice a few simple ratio calculations, such as a capital ratio from given capital and risk-weighted assets, and always state what the result means.
  5. Do scenario questions and ask what the best answer is for the board, the risk function or the regulator, not just which statement is true.
  6. Link each topic to a real case from the readings, such as a governance failure or a stress test, so you can recognize it in a case-style question.
  7. Revise using the quick revision list, then redo the questions you missed after a few days.

Common mistakes in Risk, Regulation and Organizational Structure

  • Treating governance and culture as common sense and answering from intuition.

    Fix: Learn the exact roles, responsibilities and terms from the readings and choose the answer that matches them.

  • Mixing up capital and liquidity requirements.

    Fix: Remember that capital covers losses and liquidity covers cash outflows. Write what each ratio measures next to its name.

  • Calculating a ratio correctly but misreading what it means.

    Fix: After every calculation, state whether the firm meets the requirement and what that implies.

  • Confusing risk appetite, risk tolerance and risk limits.

    Fix: Treat appetite as the broad level of risk the firm wants to take and limits as the operating controls that enforce it, following the reading's definitions.

  • Seeing stress testing as only a regulatory exercise.

    Fix: Know that internal stress tests support capital planning, limit setting and board decisions, and that governance of the process is testable.

  • Ignoring how this chapter connects to Current Issues.

    Fix: Ask how systemic risk, stress testing and capital rules apply to areas like private credit, government debt and digital assets.

Last-day revision: Risk, Regulation and Organizational Structure

  • The board holds ultimate responsibility for risk oversight and sets the risk appetite.
  • The CRO should be independent of business lines and have direct access to the board.
  • A risk appetite statement links strategy, limits and the capital the firm is willing to put at risk.
  • Risk culture is shown by behavior and incentives, not by written policy alone.
  • The three lines of defense are business management, independent risk and compliance, and internal audit.
  • Compensation tied only to short-term profit can encourage excess risk-taking.
  • Capital ratio = eligible capital ÷ risk-weighted assets; higher-quality capital absorbs losses first.
  • Basel liquidity standards include the Liquidity Coverage Ratio for short-term stress and the Net Stable Funding Ratio for longer-term funding.
  • Stress tests ask whether capital stays above requirements under severe but plausible scenarios.
  • Scenario design, data quality and governance of the stress testing process matter as much as the results.
  • Systemic risk is the risk that distress at one institution or market spreads and harms the wider financial system.
  • Post-crisis reforms aim to raise capital, improve liquidity and reduce the damage from failure of large institutions.

Risk, Regulation and Organizational Structure practice questions

Risk, Regulation and Organizational Structure in other exams

The same ground in other exams, if you are preparing for more than one or want another angle on it.

Risk, Regulation and Organizational Structure: frequently asked questions

Is this chapter mostly theory or calculation?

It is mostly conceptual, with some simple ratio work. Expect questions that ask you to apply a definition to a case and interpret the result.

Which topic should I spend the most time on?

Basel capital and liquidity regulation, because it has the most precise definitions and ratios. Do not neglect governance and risk appetite, which are quick marks once learned.

How does this chapter help with the Current Issues topic?

Current Issues readings on private credit, government debt, AI and digital assets are often framed as risks to firms and to financial stability. Your understanding of governance, stress testing and systemic risk gives you the language to answer them.

How many questions will come from this chapter?

GARP does not publish a fixed count for each chapter in the way this page can state. The exam has 80 equally weighted questions across six topics, so prepare every topic well.