FRM Certification & Enterprise Risk
The Financial Risk Manager curriculum, mapped to the official GARP program and extended into enterprise risk operations, data engineering, regulatory templates, and implementable deliverables.
The FRM curriculum, and beyond it
The FRM curriculum is a rigorous tour of financial risk: foundations and quantitative analysis, financial markets and products, and valuation and risk models in Part I, then market, credit, operational, and liquidity risk in depth in Part II. This program follows that curriculum closely, but it does something the exam alone does not: it extends into how risk is actually run inside an institution.
That enterprise extension is what distinguishes this program. Alongside exam readiness, you build the skills a real risk function needs: risk-data architecture with BCBS 239 readiness in mind, Python, Excel, and SQL for risk work, dashboards in Power BI and Tableau, and the regulatory packs, ICAAP and ILAAP templates, Basel III and IV guidance, that risk teams produce. The result is someone who can pass the exam and do the job.
The FRM's reputation rests on its rigor, and the program respects that by making the quantitative material something you use rather than memorize. Implementing the measures in Python, Excel, and SQL means you understand them from the inside, which is what lets you answer the exam's applied questions and, more importantly, what lets you compute and defend these numbers in a real risk function.
Measuring and managing risk
The core of the FRM is measurement, and the program treats it concretely. You learn market risk measurement through value at risk and expected shortfall, credit risk through exposure, counterparty credit risk, and credit valuation adjustment, and operational and liquidity risk through the frameworks that govern them. Each is taught with the calculations and the judgment the role requires.
The program keeps returning to the point that measurement exists to enable management. A VaR number is only useful if it drives a limit, a capital decision, or an escalation, so the curriculum connects the measures to the risk-management framework they serve, which is exactly the enterprise perspective the extension builds on.
The measurement curriculum is taught with its purpose always in view: risk is measured to be managed. Connecting every VaR, every exposure, and every capital number to the limit, decision, or escalation it drives is what turns a collection of formulas into the judgment a risk manager needs, and it is the perspective the enterprise extension deepens.
Risk data and regulation
Modern risk management is a data discipline, and this program takes that seriously. The enterprise extension covers risk-data architecture and BCBS 239, the regulatory standard for risk-data aggregation, so that you understand not just the risk measures but the data foundation that makes them trustworthy, connecting directly to the broader data-engineering capability the firm teaches.
On the regulatory side, you work with the actual artifacts: ICAAP and ILAAP templates, Basel III and IV guidance, and the reporting that supervisors expect. Producing these, rather than just reading about them, is what makes the program's graduates useful to a risk function from day one.
The data and regulatory material is where this program reaches beyond the exam into the reality of a modern risk function. Building risk-data architecture with BCBS 239 in mind and producing real regulatory packs means you graduate able to contribute to the parts of risk work that are hardest to hire for, which is exactly why the enterprise extension is worth the extra effort.
See the method, not just the topic
A representative worked example from the program, so you can see the level of concreteness the curriculum works at.
Portfolio value 1,000,000; daily volatility 1.5%; normal assumption
1-day 99% VaR:
z(99%) = 2.326
VaR = 1,000,000 x 0.015 x 2.326 = 34,890
1-day 99% Expected Shortfall (average loss beyond VaR):
ES = value x vol x phi(z) / (1 - 0.99)
= 1,000,000 x 0.015 x 0.0267 / 0.01 = 40,050
ES exceeds VaR because it averages the tail, not just its edge,
which is why regulators increasingly prefer it.The full syllabus
Four modules of five chapters each, sequenced so the material builds cumulatively. Each chapter carries a note on what it teaches.
Module 1Part I: foundations of risk
- 01Foundations of risk managementThe foundations of risk management and how risk is framed. You start with how risk itself is framed and governed.
- 02Quantitative analysisThe quantitative analysis the FRM curriculum requires. The quantitative toolkit underpins every measure that follows.
- 03Financial markets and productsFinancial markets and the products traded in them. Products are taught so their risks are understood, not just their names.
- 04Valuation and risk modelsValuation and the risk models built on it. Valuation and its risk models form the technical core of Part I.
- 05The risk-management frameworkThe risk-management framework that ties measures to decisions. The framework connects every measure to a decision it drives.
Module 2Part II: market and credit risk
- 06Market risk measurement and managementMeasuring and managing market risk. Market risk measurement is taught with the calculations, not around them.
- 07Value at risk and expected shortfallValue at risk and expected shortfall in practice. VaR and expected shortfall are compared honestly, tail against tail.
- 08Credit risk measurement and managementMeasuring and managing credit risk. Credit risk moves from exposure to loss with real rigor.
- 09Counterparty credit riskCounterparty credit risk and its subtleties. Counterparty risk adds the subtlety that a partner can fail too.
- 10Credit valuation adjustmentCredit valuation adjustment and what it captures. CVA puts a price on counterparty risk you can actually compute.
Module 3Part II: operational and liquidity risk
- 11Operational risk and resilienceOperational risk and building resilience. Operational risk and resilience get the seriousness they deserve.
- 12Liquidity and treasury riskLiquidity and treasury risk. Liquidity risk is treated as the risk that moves fastest.
- 13Basel III and IV guidanceBasel III and IV, and what they require. Basel III and IV are taught as what they require you to do.
- 14ICAAP and ILAAP templatesICAAP and ILAAP templates you can actually use. You produce ICAAP and ILAAP templates, not just read about them.
- 15Regulatory capital and reportingRegulatory capital and the reporting supervisors expect. Regulatory capital connects the measures to what supervisors expect.
Module 4Enterprise extension
- 16Risk data architecture and BCBS 239 readinessDesigning risk-data architecture with BCBS 239 in mind. BCBS 239 makes the data foundation of risk trustworthy.
- 17Python, Excel, and SQL for riskUsing Python, Excel, and SQL for real risk work. The languages of risk, Python, Excel, SQL, become tools you wield.
- 18Power BI and Tableau risk dashboardsBuilding risk dashboards in Power BI and Tableau. Dashboards turn risk numbers into something leaders can use.
- 19Enterprise risk-operations capstonesDelivering enterprise risk-operations capstones. The capstones prove you can run risk operations, not just pass an exam.
- 20Building implementable regulatory packsProducing implementable regulatory packs. The regulatory packs are deliverables a bank could genuinely use.
How to prepare, and beyond the exam
The FRM rewards a working understanding, not just memorization, so this program is built to develop both. The most effective approach is to treat the calculations as things you implement rather than formulas you recall, using the Python, Excel, and SQL labs to make the measures concrete, and to connect every measure back to the decision it drives, which is exactly how the exam's harder questions are framed.
The enterprise extension is where this program asks more of you than the exam does, and it is worth the effort. Building the regulatory packs, the risk-data architecture, and the dashboards turns abstract knowledge into demonstrable capability, and it is what distinguishes a graduate who can pass the FRM from one who can also do the job a risk function needs done.
Where the FRM takes you
The FRM is the leading credential for financial risk roles, and it opens positions across market, credit, operational, and enterprise risk in banks, asset managers, and increasingly in energy and commodity trading. The enterprise extension broadens that further, into risk-technology and risk-data roles that sit at the intersection of risk and engineering, which are among the most in-demand positions in the field.
In the journey, the FRM connects forward to the energy market-risk role program and to the ETRM data-engineering track, both of which build on its measurement foundations. It pairs with PRM as the two complementary risk certifications, and its data emphasis links it to the firm's broader data-engineering curriculum.
Two parts, one integrated discipline
The FRM is split into two parts, and the program teaches them as one integrated discipline rather than two separate hurdles. Part I builds the foundations, quantitative analysis, and product knowledge that Part II's risk measurement depends on, so studying them in sequence and consciously connecting them is what makes the harder Part II material tractable.
The exam rewards applied understanding, and the program's labs are designed to build exactly that. Implementing the risk measures rather than memorizing their formulas is what prepares you for the exam's applied questions and, crucially, for the moment a risk function asks you to compute and defend the same numbers on real positions.
What you will be able to do
- Master the full FRM curriculum mapped to the GARP program
- Measure and manage market, credit, operational, and liquidity risk
- Build risk-data architecture with BCBS 239 readiness in mind
- Produce regulatory packs and dashboards banks can use
- Combine exam readiness with enterprise implementation skill
Who should take it
- FRM candidates who want enterprise skills alongside the exam
- Risk and quant analysts
- Data engineers and risk-platform builders
- Treasury, ALM, compliance, and audit professionals
Risk as a data and technology discipline
Modern risk management has become inseparable from data and technology, and the FRM program's enterprise extension reflects that reality directly. Risk-data architecture, BCBS 239 readiness, and dashboards in Power BI and Tableau are not peripheral skills but central to how risk is run today, and building them is what makes a graduate immediately useful to a contemporary risk function.
This data emphasis is also what connects the FRM to the firm's broader curriculum. The risk-data and regulatory-reporting skills bridge directly to the ETRM data-engineering track and the energy market-risk role program, so the FRM sits at a crossroads in the journey, opening both traditional risk roles and the risk-technology positions that are hardest to fill.
What makes this program different
The FRM curriculum is defined by GARP, so this program differentiates by extending well beyond it into how risk is actually run inside an institution. The enterprise extension, risk-data architecture, BCBS 239 readiness, real regulatory packs, and dashboards, is what turns exam knowledge into demonstrable capability, and it is the reason graduates can contribute to a risk function rather than only pass its entrance exam. That bridge from certification to implementation is the program's signature.
The second distinction is treating risk as a data and technology discipline, which is how modern risk functions increasingly operate. Building the measures in Python, Excel, and SQL, and the data foundation that makes them trustworthy, prepares graduates for the risk-technology and risk-data roles that are among the hardest to fill. This positions the FRM program as a crossroads that opens both traditional risk and risk-engineering careers.
Common questions and how to prepare
A common question is whether the enterprise extension is worth the extra effort on top of an already demanding exam. For anyone who wants to work in risk rather than only certify, the answer is clearly yes: the extension is what makes you useful on day one, and it addresses exactly the capabilities employers struggle to hire. The exam proves knowledge; the extension proves you can apply it.
The main pitfall is treating the quantitative material as formulas to memorize rather than methods to implement. Building the measures yourself is what prepares you for the exam's applied questions and for real work, so using the labs seriously is essential. Connecting every measure to the decision it drives, rather than learning it in isolation, is the habit that both the exam and the job reward.
What you build and keep
Deliver an enterprise risk-operations capstone: build a risk-data pipeline with BCBS 239 readiness in mind, compute market and credit risk measures, and produce a regulatory pack (ICAAP/ILAAP templates with Basel III/IV guidance) that a bank could actually use.
Format: Self-paced with lifetime access; 400+ lessons, 12 enterprise capstones, 5,000+ practice questions.
Run this program for your team
Every program can be delivered as a private, tailored cohort for your organization, aligned to your systems, policies, and career frameworks.
Scope a corporate cohortFrequently asked questions
What is the FRM Certification & Enterprise Risk program?
The Financial Risk Manager curriculum, mapped to the official GARP program and extended into enterprise risk operations, data engineering, regulatory templates, and implementable deliverables.
Who is this program for?
It suits fRM candidates who want enterprise skills alongside the exam, along with others described on this page.
How is it delivered?
Self-paced with lifetime access; 400+ lessons, 12 enterprise capstones, 5,000+ practice questions.
Is there a project or capstone?
Deliver an enterprise risk-operations capstone: build a risk-data pipeline with BCBS 239 readiness in mind, compute market and credit risk measures, and produce a regulatory pack (ICAAP/ILAAP templates with Basel III/IV guidance) that a bank could actually use.
How does this fit the wider journey?
FRM and PRM are the two risk certifications in the journey, and they reinforce each other. FRM's enterprise extension also bridges directly to the firm's ETRM data-engineering and market-risk role programs.
Can my organization run this as a private cohort?
Yes. Every program can be delivered as a tailored corporate cohort. Contact us to scope it.