Knowledge check10 questions
Risk Appetite vs Risk Tolerance — Knowledge Check
Ten questions on risk appetite, tolerance, capacity, thresholds, governance decisions and escalation.
The practice roomTurn understanding
Turn understanding
into better decisions.
Check what you know. Work through a real-world decision. Leave with a clearer sense of what to do next.
Make your practice count. Sign in before you start to keep your results. Guest attempts last 24 hours.
About saved progressChoose an exercise
What will you practise today?
Choose a knowledge check or scenario to begin.
Knowledge check10 questions
Risk Treatment Strategies — Knowledge Check
Ten formative questions testing treatment selection, governance authority, current versus target risk and evidence-based verification. Outcome mapping and distractor feedback are in the editorial assessment guide.
Knowledge check10 questions
Risk Monitoring, KRIs and Reporting — Knowledge Check
Ten formative questions on indicator selection, measurement, thresholds, monitoring and management reporting.
Knowledge check10 questions
ERM Toolkit Guided Practice — Knowledge Check
Ten formative questions covering register quality, assessment, treatment, appetite and monitoring.
Knowledge check24 questions
ERM Pathway Assessment — Integrated Risk Judgement
24-question assessment spanning identification, evidence, scoring, appetite, treatment, control evaluation, monitoring and reporting. Fictional policies apply where specified.
Knowledge check5 questions
TPRM Fundamentals — Knowledge Check
Five formative questions about third-party dependencies, risk-based reviews, assurance evidence and ownership.
Knowledge check8 questions
Supplier Criticality and Risk Tiering — Knowledge Check
Eight questions on business dependency, data exposure, classification overrides, evidence and supplier reassessment.
Knowledge check10 questions
Inherent Supplier Risk Assessment — Knowledge Check
Ten questions on scoping, scenarios, assessment methodology, evidence gaps and risk ownership.
Knowledge check10 questions
Supplier Due Diligence and Questionnaires — Knowledge Check
Ten formative questions on risk-led questionnaire design, evidence review and decision governance.
Knowledge check10 questions
Reviewing ISO 27001 and SOC 2 Assurance — Knowledge Check
Ten questions on certification verification, SOC 2 scope and opinions, exceptions, CUECs and evidence gaps.
Knowledge check10 questions
Assessing Supplier Controls and Evidence Gaps — Knowledge Check
Ten questions on supplier control design, implementation, operation, evidence quality, exceptions and finding closure.
Knowledge check10 questions
Supplier Residual Risk and Treatment Decisions — Knowledge Check
Ten scenario questions covering supplier risk findings, evidence uncertainty, residual versus target risk, treatment, acceptance, conditional approvals and verification.
Knowledge check10 questions
Security Requirements in Supplier Contracts
Ten scenario-based questions on cyber contract requirements, UK GDPR Article 28, evidence, escalation and governance.
Knowledge check10 questions
Continuous Monitoring and Third-Party Incidents
Ten applied questions on supplier monitoring, reassessment, incidents, data breach handling, KRIs and finding closure.
Knowledge check10 questions
Supplier Offboarding, Exit Planning and Concentration Risk
Ten scenario questions on exit governance, access revocation, data return/deletion, transition validation and shared dependencies.
Knowledge check10 questions
Third-Party Risk Assessment Reporting
Ten scenario questions on evidence-based supplier reports, findings, risk positions and decisions.
Knowledge check25 questions
TPRM Final Assessment — Integrated Supplier Risk Decisions
25 scenario-based questions spanning TPRM T01–T11 and the GRC Workshop TPRM Toolkit v1.0. Uses fictional Meridian policies and defined scoring. Each answer has option-specific feedback. Proposed passing threshold: 75% (configure in platform).
These exercises support learning and reflection. Scores describe an attempt within its chosen tier; they are not a professional certification.