In 2026, certification requirements shift constantly, and a question bank that is six months old can quietly work against you. That is why the CIMA Risk Management set on ExamTorrent is reviewed continuously, and 287 current practice questions reach your email when refreshed.
CIMA P3 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Enterprise Risk | 25% | - Risk registers and assurance mapping - Risk exposure, appetite and capacity - Sources and types of risk - ERM frameworks (e.g., COSO, ISO 31000) |
| Topic 2: Internal Controls | 25% | - Designing and recommending controls - COSO Internal Control Framework - Internal audit and compliance |
| Topic 3: Strategic Risk | 25% | - Reputational and governance risk - Role of board and audit committees - Risks in strategy formulation |
| Topic 4: Cyber Risk | 25% | - Cybersecurity threat types - Cyber risk reporting frameworks - Data protection and controls (ISO27001, NIST) |
Before You Buy: CIMA Risk Management FAQ
The P3 exam contains 60 questions to be answered within 90 minutes minutes. Rehearsing with a timer on ExamTorrent trains you to pace each question instead of rushing at the end.
Completion of CIMA Management level (E2, P2, F2 and Management Case Study) or relevant exemptions required before registering for Strategic level exams.
The CIMA Risk Management material is developed by a dedicated research team whose members bring rich hands-on IT experience, including past work for international IT corporations. That background shapes both the questions and the way they are organized for study.
Each CIMA Risk Management question is drawn from a large body of technical knowledge and analyzed before it enters the bank. Questions that are no longer relevant to the current exam are removed, while new material is added as the exam evolves, so the set you study stays lean and current.
- Cyber Risk (25%)
- Internal Controls (25%)
- Strategic Risk (25%)
Begin with the topics where your confidence is lowest, then confirm the rest.
The passing score for P3 is 100 scaled score (approx. ~67%), and the official exam fee is Exam entry fees vary by region and membership status (e.g., ~$331 via AICPA & CIMA pricing). Fixing these numbers in mind helps you plan both your study target and your budget.
The package includes 287 practice questions for the P3 exam, covering the current CIMA Risk Management objectives with verified answers.
CIMA Risk Management Sample Questions:
YHU manufactures flour from wheal (hat it purchases from wheat wholesalers who buy the gram in bulk from farmers around the world and import it to YHU's home country.
YHU sells its flour as "organic and free from genetically modified grain" It is difficult to test wheat to ensure that it is organic and impossible to prove that it has not been obtained from genetically modified crops YHU must trust its wholesalers to check the provenance of the wheat that they buy for resale to YHU.
Without YHU's knowledge, a consignment of wheat that it has used to make flour was purchased from a farmer who used genetically modified seed. The wholesaler made an error in tracking this consignment through its inventory system and sold it to YHU as organic and free from genetically modified gram Which TWO of the following are correct?
- A. YHU's total risk is affected by both the risk that the flour was incorrectly labelled and that the company was unaware of that fact
- B. The risk of YHU discovering this error is minimal because the wholesaler will both have to realise its mistake and be willing to admit to it.
- C. YHU could easily eliminate the risks associated with such errors by putting a prominent warning on its flour bags that they may contain flour made from non-organic or genetically modified flour.
- D. If YHU admits to this error then there is a strong risk that customers will take legal action for being sold a dangerous product and that the courts will find in the customers' favors.
- E. YHU should ignore the interaction between risk factors when considering its response to the possibility of mislabelled ingredients
Correct Answer: A,D 🗳️
B is a family run security company with a number of prestigious clients who rely on it to maintain online access to their CCTV and alarm systems and respond to any detected intrusions or malfunctions.
It designs and installs security systems for a number of UHNW (Ultra High Net Worth) individuals who may have several seasonal and city residences largely unoccupied for many months of the year.
B's reputation as 100% secure is crucial to its on-going success in this very specialised marketplace.
Select THREE factors which should be given prominence in B's fraud risk management strategy.
- A. B should ensure that employees who design or install security systems are not involved with the operation of those systems once implemented.
- B. B should inform clients that they have a stringent anti-fraud policy.
- C. B should have an active whistle-blower policy whereby all staff are encouraged by positive reward to report any suspicions they may have about other employees.
- D. B should carry out background security, health and financial checks on all employees, their immediate family members and associates on an annual basis.
- E. B should ask new employees to fill in a declaration that they are honest and have no criminal convictions for dishonesty. That can be filed as evidence that the company took this precaution.
- F. B Should revise and publish their fraud policy document to employees every three months, highlighting any new elements and industry developments.
Correct Answer: C,D,F 🗳️
The shares of a company have a beta factor of 1.15. Therefore, which of the following must be true?
- A. The shares have more total risk than the stock market average.
- B. The shares have more unsystematic risk than the stock market average.
- C. The shares have more systematic risk than the stock market average.
- D. The shares have less unsystematic risk than the stock market average.
Correct Answer: C 🗳️
HGY is a major global corporation that has decided to implement the COSO Enterprise Risk Management Framework and integrate management practices throughout the organisation Which THREE of the following would be appropriate for HGY?
- A. Train staff at all levels to identify and report risks to their superiors
- B. Recruit a Director of Risk, who will lead risk management procedures.
- C. Create a risk management team that will take responsibility for identifying and mitigating risk
- D. Identify risk as an element of HGY's overall strategy.
- E. Authorise managers and supervisors to respond immediately to any risks that emerge
- F. Make risk management an element of everyone's responsibility
Correct Answer: C,D,F 🗳️
E purchases parts for one of the machines it manufactures from Country X Place the risk classification next to the risk it relates to:
Correct Answer:


Viewing page 1 out of 58 pages.
Viewing questions 1-5 out of 287 questions.






1133 Customer Reviews

