Knowledge check10 questions
Risk Appetite vs Risk Tolerance — Knowledge Check
Ten questions on risk appetite, tolerance, capacity, thresholds, governance decisions and escalation.
The practice roomTurn understanding
Turn understanding
into better decisions.
Check what you know. Work through a real-world decision. Leave with a clearer sense of what to do next.
Make your practice count. Sign in before you start to keep your results. Guest attempts last 24 hours.
About saved progressChoose an exercise
What will you practise today?
Choose a knowledge check or scenario to begin.
Branching scenarioDecisions & feedback
Respond to a Risk Appetite Breach
An applied governance exercise with junior, analyst and senior tiers. Interpret thresholds, validate risk evidence and choose appropriate escalation and treatment decisions.
Knowledge check10 questions
Risk Treatment Strategies — Knowledge Check
Ten formative questions testing treatment selection, governance authority, current versus target risk and evidence-based verification. Outcome mapping and distractor feedback are in the editorial assessment guide.
Branching scenarioDecisions & feedback
Choose and Justify a Risk Treatment
Short tiered decision scenarios on payment-service resilience, treatment options, exceptions and verification. These are lightweight exercises, not the future immersive simulation lab.
Knowledge check10 questions
Risk Monitoring, KRIs and Reporting — Knowledge Check
Ten formative questions on indicator selection, measurement, thresholds, monitoring and management reporting.
Branching scenarioDecisions & feedback
Monitor Risk and Brief Management
A short three-tier exercise covering KRI interpretation, data quality, threshold escalation and executive reporting.
Knowledge check10 questions
ERM Toolkit Guided Practice — Knowledge Check
Ten formative questions covering register quality, assessment, treatment, appetite and monitoring.
Branching scenarioDecisions & feedback
Build and Review a Defensible Risk Record
Three brief tiers testing risk statements, assessments, treatment follow-up and executive recommendations.
Knowledge check24 questions
ERM Pathway Assessment — Integrated Risk Judgement
24-question assessment spanning identification, evidence, scoring, appetite, treatment, control evaluation, monitoring and reporting. Fictional policies apply where specified.
Branching scenarioDecisions & feedback
ERM Capstone — Advise the Risk Committee
Three short, integrated decision exercises across Junior, Analyst and Senior tiers. Fictional organisational rules and thresholds.
Knowledge check5 questions
TPRM Fundamentals — Knowledge Check
Five formative questions about third-party dependencies, risk-based reviews, assurance evidence and ownership.
Knowledge check8 questions
Supplier Criticality and Risk Tiering — Knowledge Check
Eight questions on business dependency, data exposure, classification overrides, evidence and supplier reassessment.
Knowledge check10 questions
Inherent Supplier Risk Assessment — Knowledge Check
Ten questions on scoping, scenarios, assessment methodology, evidence gaps and risk ownership.
Knowledge check10 questions
Supplier Due Diligence and Questionnaires — Knowledge Check
Ten formative questions on risk-led questionnaire design, evidence review and decision governance.
Knowledge check10 questions
Reviewing ISO 27001 and SOC 2 Assurance — Knowledge Check
Ten questions on certification verification, SOC 2 scope and opinions, exceptions, CUECs and evidence gaps.
Knowledge check10 questions
Assessing Supplier Controls and Evidence Gaps — Knowledge Check
Ten questions on supplier control design, implementation, operation, evidence quality, exceptions and finding closure.
Knowledge check10 questions
Supplier Residual Risk and Treatment Decisions — Knowledge Check
Ten scenario questions covering supplier risk findings, evidence uncertainty, residual versus target risk, treatment, acceptance, conditional approvals and verification.
Knowledge check10 questions
Security Requirements in Supplier Contracts
Ten scenario-based questions on cyber contract requirements, UK GDPR Article 28, evidence, escalation and governance.
Knowledge check10 questions
Continuous Monitoring and Third-Party Incidents
Ten applied questions on supplier monitoring, reassessment, incidents, data breach handling, KRIs and finding closure.
Knowledge check10 questions
Supplier Offboarding, Exit Planning and Concentration Risk
Ten scenario questions on exit governance, access revocation, data return/deletion, transition validation and shared dependencies.
Knowledge check10 questions
Third-Party Risk Assessment Reporting
Ten scenario questions on evidence-based supplier reports, findings, risk positions and decisions.
Knowledge check25 questions
TPRM Final Assessment — Integrated Supplier Risk Decisions
25 scenario-based questions spanning TPRM T01–T11 and the GRC Workshop TPRM Toolkit v1.0. Uses fictional Meridian policies and defined scoring. Each answer has option-specific feedback. Proposed passing threshold: 75% (configure in platform).
Branching scenarioDecisions & feedback
Supplier Risk Decision: Remediate, Escalate or Accept
Applied third-party risk decisions using fictional Meridian Financial Services. Three progressively demanding tiers; branch choices have differentiated feedback and scoring. After T07.
Branching scenarioDecisions & feedback
Supplier Incident: Triage, Evidence and Reassessment
Applied third-party risk decisions using fictional Meridian Financial Services. Three progressively demanding tiers; branch choices have differentiated feedback and scoring. After T09.
Branching scenarioDecisions & feedback
Supplier Due Diligence: Challenge the Evidence
Applied third-party risk decisions using fictional Meridian Financial Services. Three progressively demanding tiers; branch choices have differentiated feedback and scoring. After T04 (or T06 if a scenario is assigned per step).
Workplace simulationTasks, evidence & decisions
The supplier launches on Friday
Draft for editorial review. Assess a fictional supplier under launch pressure: classify the relationship, evaluate evidence, separate current and target risk, and recommend an authorised response. Includes distinct Junior, Analyst and Senior cases. Written reflection is ungraded.
These exercises support learning and reflection. Scores describe an attempt within its chosen tier; they are not a professional certification.