Exam Blueprint and Recommended Reading

RIMS-CRMP-FED Examination Blueprint

DUTIES AND TASKS%
Understanding the Federal Government Enterprise Risk Management Environment50%
IA. Identify sources of government information and reporting (e.g., GAO, OIG, internal reports) 
IB. Assess key stakeholders 
IC. Identify the alignment between Enterprise Risk Management and Internal Controls in the Federal government environment 
ID. Analyze Federal government Enterprise Risk Management initiatives according to Federal government standards (e.g., OMB, GAO, NIST, etc.) 
IE. Identify Federal government reporting requirements 
IF. Distinguish between Federal government reporting requirements 
Enterprise Risk Management Implementation in the Federal Government40%
IIA. Communicate roles and responsibilities within the Federal agency’s ERM process 
IIB. Coordinate and work with stakeholders and partners (e.g., oversight bodies, internal, external, public or private sector, Federal, State, Local, Tribal, Territorial, etc. 
IIC. Engage Federal government risk networks [Communities of Practices (CoP) internal to the organization and external networks such as professional associations or cross-government CoPs] 
IID. Develop internal communication strategies (top-down, bottom-up and lateral communications) on the Federal agency’s ERM process 
IIE. Align resources to respond to positive and negative risks within the Federal agency’s risk appetite to achieve desired results 
IIF. Implement risk controls and other risk management initiatives according to Federal government standards (e.g., OMB, GAO, NIST, etc.) 
IIG. Integrate the Federal agency’s ERM activities with other core business processes (e.g., strategy, performance, budget, etc.) 
Enterprise Risk Management Reporting in the Federal Government10%
IIIA. Prepare internal reports according to Federal government reporting requirements 
IIIB. Prepare external reports according to Federal government reporting requirements 

 

RIMS-CRMP-FED Reference List

  1. CFO and PIC (July 29, 2016). Playbook: Enterprise Risk Management for Federal Government. Washington, DC: U.S. Government Printing Office. Updated in 2021 but not yet released.*
  2. Committee of Sponsoring Organizations of the Treadway Commission (June 2017). Enterprise Risk Management: Integrating with Strategy and Performance.
  3. Government Accountability Office (Dec. 2016). Enterprise Risk Management: Selecting Agencies’ Experiences Illustrate Good Practices in Managing Risk. (GAO Publication No. 17-63). Washington, DC: U.S. Government Printing Office.*
  4. HM Treasury. The Orange Book: Management of Risk – Principles and Concepts.
  5. OMB (July 15, 2016). Circular No. A-123, Management’s Responsibility for Enterprise Risk Management and Internal Control. Washington, DC: U.S. Government Printing Office.*
  6. OMB Circular No. A-11, Preparation, Submission, and Execution of the Budget. PART 6 – The Federal Performance Framework for Improving Program and Service Delivery.*
  7. AFERM Federal ERM Areas of Practice Guidance. In development/partly available.* New!
  8. NISTIR 8286 - Integrating Cybersecurity and Enterprise Risk Management (ERM). (October 2020) New!
  9. Hardy, Karen. Enterprise Risk Management: A Guide for Government Professionals. Wiley Publishing. New!
  10. Stanton and Webster. Managing Risk and Performance: A Guide for Government Decision Makers. Wiley Publishing. New!
  11. Improving Government Decision Making Through Enterprise Risk Management. IBM Center for the Business of Government. New!

*Top 5 most important reference

Questions?

Contact CRMP@RIMS.org.