Pass the PRMIA PRM Certification 8020 Questions and answers with ExamsMirror

TheFTX collapseinvolvedfraudulent fund mismanagement, where FTX executives created a "backdoor" to allowAlameda Research (FTX’s sister trading firm) to borrow client funds without their consent.

The backdoor wasa hidden code in FTX’s system, allegedly created bySam Bankman-Fried, which allowed Alameda to accesscustomer depositswithout triggering alerts to auditors or compliance teams.

Alameda used these fundsfor risky trading strategies and investments, leading to the eventual collapse of FTX when a liquidity crunch exposed the missing funds.

Option A ("allowed a stablecoin to be removed from the ledger and added to the balance sheet")

Incorrect because FTX’s fraud involvedmisuse of customer funds, not just a stablecoin misclassification.

Option C ("allowed currency traders to smooth profits and conceal losses for over two years")

Incorrect because this sounds more likeLIBOR-rigging scandals, whereas FTX misappropriated client funds.

Option D ("allowed a rapid pace of acquisitions but poor integration of acquired companies")

Incorrect because FTX's collapse was due tofinancial fraud, not poor acquisition strategy.

Step 1: The "Backdoor" in FTXStep 2: Why the Other Options Are Incorrect

PRMIA Financial Crime Risk Management– Discusses insider risk and fraudulent misappropriation of funds.

FTX Collapse Reports– SEC, CFTC, and DOJ filings confirm that Alameda had unauthorized access to client funds.

PRMIA Risk References Used:

Final Conclusion:FTX’s backdoorenabled Alameda to take $65 billion in client funds without permission, makingOption B the correct answer.

AChief Risk Officer (CRO)plays a crucial role inshaping and strengthening the risk culturewithin an organization. PRMIA defines risk culture as the shared values, beliefs, knowledge, and understanding about risk that drive behaviors within an institution.

Setting a Clear Vision

The CRO should communicate avision of risk managementthat aligns withorganizational goalswhile ensuring that risk-taking remains within acceptable limits.

The vision should beachievable and realistic, rather than overly ambitious, which could incentivize reckless risk-taking.

Embedding Risk Awareness into Decision-Making

A strong risk culture ensures that risk considerations are embedded into business decision-making rather than treated as a separate compliance exercise.

This is supported byPRMIA’s Enterprise Risk Management (ERM) Framework, which stresses integrating risk management into strategy and operations.

Avoiding a Blame Culture

A risk-aware organization promotesaccountability without fear, enabling employees to report risks without retribution.

Option B (Discourage personal accountability to avoid a blame culture) isincorrectbecause personal accountability is essential for a healthy risk culture.

Avoiding a Strict, Prescriptive Approach

Aset of rigid objectivesthat must be followed by the executive team (Option C) does not foster a dynamic, evolving risk culture.

Instead, risk culture should be flexible and adaptive to emerging risks.

Balancing Incentives and Consequences

Whilebalancing rewards with penalties(Option D) is part of governance, a strong risk culture isnotbuilt solely through fear of punishment.

PRMIA emphasizespositive reinforcement, such as linking risk management behaviors to performance evaluations and incentives.

PRMIA Risk Governance Framework– Discusses the role of leadership in shaping risk culture.

PRMIA Standards on Enterprise Risk Management (ERM)– Covers best practices for embedding risk culture within organizations.

PRMIA References for Verification

TheTurnbull Report (1999)was a UK corporate governance report thatset risk management expectations for boards.

Itrequired companies to assess and manage risks effectivelyas part of corporate governance.

Turnbull was the first report to mandate that boards must consider risk management in corporate governance.

This reportestablished risk assessment as a board-level responsibility.

Option A ("Defined risk governance for insurance")→ Incorrect becauseTurnbull applied to all sectors, not just insurance.

Option B ("First report to propose board structure")→ Incorrect becausecorporate boards existed long before Turnbull.

Option D ("Led to the US Federal Reserve")→ Incorrect becausethe Federal Reserve was established in 1913, long before Turnbull.

Step 1: What Is the Turnbull Report?Step 2: Why Option C is CorrectStep 3: Why the Other Options Are Incorrect

PRMIA Corporate Governance Guidelines– Highlights Turnbull's role in board-level risk oversight.

UK Corporate Governance Code– Turnbull contributed to defining board risk responsibilities.

PRMIA Risk References Used:

Final Conclusion:The Turnbull Report was the first to require boards to consider risks in corporate governance, makingOption C the correct answer.

Financial Crime Risk Management

Managing financial crime requires implementingcontrols, monitoring, and reporting systemsto detect and prevent illegal activities.

Developing red flags and monitoring scenariosallows firms to detect suspicious transactions related tomoney laundering, fraud, and terrorist financing.

Why Answer C is Correct

PRMIA emphasizes thateffective risk management requires proactive monitoring of transactionsusing red flags, transaction patterns, and anomaly detection systems.

This is aligned with Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) regulatory requirements.

Why Other Answers Are Incorrect

Option

Explanation

A. Having the business be a cash-only business and not report any transactions.

Incorrect– Cash-only businesses withno reportingarehigh-riskfor financial crime.

B. The requirements to trace all transactions when they are entered into spreadsheets.

Incorrect– While transaction tracing is important,spreadsheets alone are not an effective control mechanismfor financial crime.

D. Local regulations that allow a bank to not report transactions by family members of the board.

Incorrect– This would violateAML and financial crime regulations, increasing corruption risk.

PRMIA Financial Crime and AML Risk Guidelines

Basel Committee on Financial Crime and Money Laundering

PRMIA References for Verification

Arisk assessment workshopis a structured session where key stakeholdersidentify, evaluate, and prioritize risks.

Effective workshops requirepreparation, clear objectives, and structured discussionsto ensure meaningful risk analysis.

PRMIA and best practices recommendthorough preparation, including:

Setting objectives

Defining risk categories

Ensuring participation from risk, compliance, and business units

Providing risk assessment tools/templates

Option A ("Run spontaneously")→ Incorrect becauselack of preparation leads to poor discussions and missed risks.

Option C ("Risk management should not attend")→ Incorrect becauserisk managers provide key expertise to guide discussions.

Option D ("Compliance experts should not attend")→ Incorrect becausecompliance provides regulatory insights essential to risk assessment.

Step 1: What Is a Risk Assessment Workshop?Step 2: Why Option B is CorrectStep 3: Why the Other Options Are Incorrect

PRMIA Risk Assessment Framework– Recommends structured, well-prepared workshops.

ISO 31000 Risk Management Standard– Supports proactive workshop planning.

PRMIA Risk References Used:

Final Conclusion:Risk assessment workshops should be well-prepared to ensure meaningful discussions and effective risk identification, makingOption B the correct answer.

ARisk Functionensures that an organization followsbest practices in risk governance, assessment, and control implementation.

It should bealigned with the board’s risk strategyand ensureindependent oversight.

Theboard sets the overall risk strategy, and therisk function implements risk controls accordingly.

PRMIA emphasizesboard oversight as the guiding force behind risk management.

Option A ("Implement management’s direction")→ Incorrect becauserisk oversight should be board-driven, not solely management-driven.

Option C ("Ensure opinions are listened to")→ Incorrect becauserisk functions enforce policies, not just share opinions.

Option D ("Lower risk-taking to zero")→ Incorrect becauserisk-taking is necessary for growth—excessive risk aversion harms business.

Step 1: Role of a Risk FunctionStep 2: Why Option B is CorrectStep 3: Why the Other Options Are Incorrect

PRMIA Risk Governance Framework– Highlights board oversight in risk management.

Basel III Risk Management Standards– Emphasizes board-driven risk controls.

PRMIA Risk References Used:

Final Conclusion:The Risk Function must follow the board’s direction in implementing risk controls, makingOption B the correct answer.

The facilitator’smain roleis toguide discussions without bias, ensuringobjective risk identification.

PRMIA’sRisk Governance Frameworkhighlightsneutral facilitationas key to effective risk workshops.

Objectivity ensures unbiased risk assessment.

Expressing personal opinions can influence risk ratings, leading todistorted outcomes.

Option A ("Guide the workshop toward a pre-determined conclusion")

Incorrect because risk workshops shoulddiscover risks, not confirm pre-set beliefs.

Option B ("Attendees can override results")

Incorrect asrisk results should be evidence-based, not subject to override.

Option D ("Attend via video connection")

Incorrect asfacilitators must engage actively, making remote facilitation less effective.

Step 1: Role of a Risk Assessment FacilitatorStep 2: Why Option C Is CorrectStep 3: Why the Other Options Are Incorrect

PRMIA Risk Governance Framework– Stresses objectivity in risk assessment facilitation.

PRMIA Risk Identification Best Practices– Encourages unbiased workshops.

PRMIA Risk References Used:

Final Conclusion:Facilitatorsmust remain neutral and objective, makingOption C the correct answer.

Credit Risk: Risk ofloss due to borrower default.

Operational Risk: Risk ofloss due to failed internal processes, fraud, or misconduct.

Ponzi Schemes: Fraudulent investment scamsdisguise credit risk as legitimate lendingbut collapse when new funds dry up.

Rogue Trading: Traderstake unauthorized risksthat can lead tocredit defaultsor massive financial losses.

Option A ("Failure in loan approval process")→ This is anOperational Risk issue, but does not always create Credit Risk.

Option B ("Ponzi Schemes")→ Partially correct, but does not includeRogue Trading, which is also a credit risk-related operational failure.

Option C ("Rogue Trading")→ Partially correct, but does not includePonzi Schemes, which are another key example.

Step 1: Understanding Credit Risk with an Operational Risk ComponentStep 2: Why Option D is CorrectStep 3: Why the Other Options Are Incorrect

PRMIA Operational Risk Framework– Highlights fraud-based Credit Risk events.

Basel II/III Operational Risk Guidelines– Discussestrading misconduct and credit risk misrepresentation.

PRMIA Risk References Used:

Final Conclusion:BothPonzi Schemes and Rogue Tradinginvolvecredit risk failures caused by operational misconduct, makingOption D the correct answer.