The FRM (Financial Risk Manager) from GARP is not a memorisation exam. It tests whether you can pick the right risk model, run it correctly, and read what it tells you, all under time pressure. The goal of studying is therefore to understand the machinery (why Value at Risk is built the way it is, what a credit model assumes, where each number breaks down) and then to drill that understanding into fast, accurate question-answering. This guide is a full, self-study course: it walks through the two parts in depth, explains the concepts behind the questions, shows where the quantitative tools actually apply, and then turns all of it into a week-by-week plan. It is original teaching material and study guidance only. It contains no real or simulated exam questions, and you should always confirm the current curriculum and weights against GARP’s own FRM learning objectives before you book.
Chapter 1: Exam overview and how to use this guide
What the FRM actually measures
The FRM measures whether you can do the working job of a risk manager: quantify how much could be lost, decide whether that loss is acceptable, and choose what to do about it. It is deliberately quantitative. The questions hand you a scenario or a small dataset and ask you to apply a model and interpret the result, not to recite a definition. That is the single most important thing to internalise before you plan your hours, because it tells you that reading alone will not pass this exam. You pass by working problems until the models are second nature.
The qualification is split into two parts, taken in order. Part I builds the toolkit: the concepts, the maths, the products, and the core valuation and risk models. Part II applies that toolkit to each kind of risk a firm actually runs. The split matters for planning because Part II is only graded if you pass Part I, so the foundations are not optional groundwork you can skim; they are the gate.
The shape of the two papers
Both papers are computer-based multiple choice and both run four hours, but they differ in length and emphasis. Part I is 100 questions in 4 hours, weighted across Foundations of Risk Management (20%), Quantitative Analysis (20%), Financial Markets and Products (30%), and Valuation and Risk Models (30%). Part II is 80 questions in 4 hours, spread across Market Risk (20%), Credit Risk (20%), Operational Risk and Resilience (20%), Liquidity and Treasury Risk (15%), Risk Management and Investment Management (15%), and Current Issues in Financial Markets (10%). Those weights are your study budget: the 30% blocks in Part I and the 20% blocks in Part II are where most of your hours belong.
Scoring is pass/fail. GARP does not publish a fixed percentage you must hit; instead it sets the passing standard for each sitting and reports your result as a pass or a quartile-based fail, with a breakdown by topic. The practical implication is that you cannot target an exact mark, so the safe strategy is broad competence across every topic rather than betting everything on your strongest area. Historically only around half of candidates pass each part, which reflects the breadth of material and the maths, not trick questions.
How to use this course
Read the chapters in order at least once. Part I (Chapters 2 to 4) builds the quantitative and product foundations that Part II (Chapters 5 and 6) then applies, so the later chapters assume the earlier ones. Treat the bold terms as a checklist: by the end you should be able to define each one, say when it applies, and run any associated calculation. The last three chapters turn the content into a schedule, a final-preparation routine, and a description of exam day. Worked illustrations appear where a concept is easy to misread, but none of these are exam questions. They are teaching examples that show how the idea behaves.
Chapter 2: Part I - Foundations and the quantitative toolkit (40%)
The first two Part I areas, Foundations of Risk Management and Quantitative Analysis, together carry 40% of Part I. They are the conceptual and mathematical bedrock for everything that follows, and they reward early, careful study because the rest of the curriculum keeps drawing on them.
What Foundations of Risk Management is
Foundations sets the worldview. It covers why firms manage risk at all, the basic vocabulary of risk and return, how risk governance is organised, and the ethics expected of a risk professional. The central idea is that risk management is not about eliminating risk but about taking it deliberately and being paid for it: a firm chooses which risks to keep, which to hedge, and which to transfer, in line with its risk appetite. You will meet foundational frameworks for thinking about expected versus unexpected loss, the role of the board and the risk function, and famous case studies of risk failures that exist to teach what goes wrong when governance or incentives break down.
Why it matters
This area is where the exam establishes the language it uses everywhere else. Terms like risk appetite, the separation of the risk-taking and risk-control functions, and the distinction between systematic and idiosyncratic risk recur throughout Part II. The case studies are not trivia: they encode the lessons (concentration, leverage, liquidity, model over-reliance) that the later quantitative topics are designed to measure. Understanding the “why” here makes the “how” in later chapters far easier to retain.
How to study it and the traps
Read for understanding rather than rote, but do make sure you can state each governance role and each risk category cleanly, because the questions test precise distinctions. The common trap is treating Foundations as soft and skimming it; in fact its concepts underpin the harder material, and easy marks are lost by candidates who never nailed the vocabulary. As a teaching example of the kind of distinction it rewards: a loss that is expected on average is meant to be covered by pricing and provisions, whereas unexpected loss is what capital is held against, and confusing the two leads you to the wrong tool later.
What Quantitative Analysis is
Quantitative Analysis is the statistics engine. It covers probability distributions, descriptive statistics, estimation and hypothesis testing, correlation and covariance, linear regression, time-series ideas like volatility modelling, and simulation. This is the mathematics that the risk models in Chapter 4 are built from, so it is worth genuine fluency rather than pattern-matching.
Why it matters and how to study it
Almost every risk number you will compute later is a statistical statement. Value at Risk is a quantile of a loss distribution; a credit model rests on a probability of default; volatility forecasting is a time-series problem. If the underlying statistics are shaky, the applied models in Part II feel like disconnected recipes. The efficient way to study this area is to work problems by hand until the mechanics are automatic: know what a distribution’s parameters mean, how a regression coefficient is interpreted, and what a hypothesis test actually concludes. The trap to avoid is memorising formulas without understanding what they measure, because the exam phrases questions so that blind formula-recall fails. As a teaching illustration: knowing that a 95% confidence statement means roughly one in twenty observations is expected to fall outside the interval is exactly the intuition you need to later interpret a VaR breach, and that intuition, not the formula sheet, is what the question is testing.
Chapter 3: Part I - Financial Markets and Products (30%)
Financial Markets and Products is one of the two largest Part I areas, and it is where many candidates underinvest because it looks like product trivia. It is not. You cannot measure the risk of an instrument you do not understand, so this chapter is the prerequisite for the valuation and risk models that follow.
Derivatives: the core of the area
The heart of this area is derivatives, and the four building blocks are forwards, futures, options, and swaps. A forward is a private agreement to buy or sell an asset at a set price on a future date; a future is the same idea standardised and exchange-traded with daily margining, which changes its credit and cash-flow profile. A swap exchanges one stream of cash flows for another, the classic case being a fixed-for-floating interest-rate swap. Options give the right but not the obligation to transact, which makes their payoff asymmetric and their risk non-linear, and that non-linearity is why options get so much attention in the risk curriculum. You should understand each instrument’s payoff, what it is used for (hedging or speculation), and crucially how it transmits risk.
Fixed income and the rest of the market
Alongside derivatives sit fixed-income instruments and the mechanics of the markets they trade in. You will cover bond pricing, yields, and the way interest-rate changes move bond prices, which leads directly into the duration and convexity material that appears again in valuation. The broader market topics (how exchanges and clearing work, the role of central counterparties, the basics of mortgages and securitised products) give the context in which risk arises. The unifying skill is to look at any instrument and ask: what makes this gain or lose value, and how much.
Why it matters and how to study it
This area is 30% of Part I and it feeds straight into Part II, where market and credit risk are measured on exactly these instruments. Treating it as a list to memorise is the classic mistake; the questions reward understanding the cash flows and the risk drivers. As a teaching example of why mechanics matter: a futures position is marked to market daily and a forward is not, so the same notional exposure can produce very different intermediate cash flows and counterparty-risk profiles, and a question that hinges on that difference is unanswerable if you only memorised “both lock in a price.” Study the products by drawing their payoffs and tracing what happens to value when the underlying moves, and the risk applications later will feel like natural extensions.
Chapter 4: Part I - Valuation and Risk Models (30%)
Valuation and Risk Models is the other 30% block and, for most candidates, the intellectual centre of Part I. This is where the statistics from Chapter 2 and the products from Chapter 3 combine into the actual measures a risk team reports. Value at Risk lives here, and it is the single most important concept in the whole qualification.
Value at Risk, properly understood
Value at Risk (VaR) is the loss that is not expected to be exceeded over a given horizon at a given confidence level. A one-day 99% VaR of a stated amount means that, on a normal day, losses are expected to exceed that amount only about 1% of the time. Read that definition slowly, because every word carries weight: it is a loss, over a specific horizon, at a specific confidence, and it is a threshold the loss is not expected to breach, not the worst case. There are three standard ways to compute it, and the exam expects you to know how each works and where each fails. The parametric (variance-covariance) method assumes returns follow a known distribution and computes the quantile from the volatility; it is fast but leans on the normality assumption. The historical simulation method re-uses the actual distribution of past returns with no distributional assumption, but it assumes the past represents the future. The Monte Carlo method simulates many possible outcomes from an assumed model, which is flexible but only as good as the model and is computationally heavy.
The limits of VaR and what fixes them
The exam is as interested in VaR’s weaknesses as in its calculation. VaR tells you a threshold but says nothing about how bad losses are beyond it, and it is not “sub-additive” in general, meaning the VaR of a combined portfolio can exceed the sum of the parts, which is theoretically awkward for a risk measure. This is why expected shortfall (also called conditional VaR) matters: it is the average loss given that you are in the tail beyond the VaR level, so it captures the severity VaR ignores, and it is a “coherent” risk measure that behaves well under aggregation. Knowing why regulators and risk teams increasingly prefer expected shortfall to VaR is a recurring theme. You will also study how VaR models are validated through backtesting, comparing predicted VaR breaches against actual ones, and stress-tested against severe but plausible scenarios that ordinary VaR would never generate.
Volatility, valuation, and reading the numbers
The chapter also covers volatility estimation (including models where volatility clusters and changes over time) and the valuation and interest-rate-sensitivity tools that follow from Chapter 3, notably duration as a bond’s first-order sensitivity to rate changes and convexity as the correction for larger moves. The skill the exam rewards is interpretation, not just computation. As a teaching example of reading a result: if a bank’s VaR is comfortably within limits but its stress test shows a catastrophic loss under a plausible shock, the right reading is that the everyday measure is masking tail risk, and the action points toward the stress scenario, not the reassuring VaR. That habit, computing a number and then asking what it does and does not tell you, is exactly what Part I is building toward.
Chapter 5: Part II - Market, credit, operational and liquidity risk (75%)
Part II applies the Part I toolkit to the four core risk types, which together make up the bulk of the paper: Market Risk (20%), Credit Risk (20%), Operational Risk and Resilience (20%), and Liquidity and Treasury Risk (15%). The pattern for each is the same, and recognising that pattern is the key to studying Part II efficiently: for every risk type, learn how it is identified, how it is measured, and how it is managed or mitigated.
Market risk
Market risk is the risk of loss from movements in market prices, rates, foreign exchange, and commodities, and it builds directly on the VaR material from Chapter 4. Here you go deeper into the measurement: how VaR and expected shortfall are applied to trading books, how to decompose risk into its sources, how interest-rate risk is captured, and how models are validated and stressed. The management side covers hedging with the derivatives from Chapter 3 and the limits frameworks that keep trading risk inside appetite. The thread back to Part I is constant, which is why mastering valuation first pays off here.
Credit risk
Credit risk is the risk that a borrower or counterparty fails to meet an obligation, and it is built on three quantities you should know cold: probability of default (PD), the chance the counterparty defaults over a period; loss given default (LGD), the fraction of exposure you actually lose if it does; and exposure at default (EAD), how much is at risk at that moment. Expected loss is, at its simplest, the product of these three, and the exam expects you to reason with that relationship and the models that estimate each input. Beyond single names, you study portfolio credit risk and the role of correlation in defaults, counterparty risk on derivatives, credit derivatives, and the way credit exposure is mitigated through collateral, netting, and central clearing. As a teaching example of reasoning with the inputs: improving collateral arrangements primarily reduces LGD, while a guarantee from a stronger third party effectively changes the PD you are exposed to, and a question may turn on which lever a given mitigant actually pulls.
Operational risk and resilience
Operational risk is the risk of loss from inadequate or failed people, processes, and systems, or from external events, and “resilience” reflects the modern emphasis on surviving disruptions such as cyber-attacks and third-party failures. Because operational losses are infrequent but occasionally enormous, the measurement challenge is different from market risk: you are modelling a long-tailed loss distribution from sparse data, combining internal loss history, external data, and scenario analysis. You study the loss-event categories, approaches to quantifying operational risk capital, and the governance and control practices (including business continuity and operational resilience) that reduce it. The recurring lesson is that operational risk is managed as much through controls and culture as through capital.
Liquidity and treasury risk
Liquidity and treasury risk is the risk of being unable to fund obligations or trade out of positions without unacceptable cost, and recent banking stress has pushed it up the agenda. You distinguish funding liquidity risk (can the firm meet its cash outflows as they fall due) from market liquidity risk (can a position be sold without moving the price against you), and you study the tools for managing both: liquidity buffers, cash-flow and maturity analysis, transfer pricing of liquidity, and the regulatory ratios that constrain it. As a teaching example of why this risk is distinct: a portfolio can be solvent on paper, with assets worth more than liabilities, yet still fail because it cannot turn those assets into cash fast enough to meet a sudden wave of withdrawals, and that timing mismatch is precisely what liquidity risk measures.
Chapter 6: Part II - Investment management and current issues (25%)
The final quarter of Part II steps up from individual risk types to the portfolio level and to the live debates in the field: Risk Management and Investment Management (15%) and Current Issues in Financial Markets (10%).
Risk and investment management
This area applies risk thinking to portfolios and asset managers rather than to a trading desk or a bank’s balance sheet. You study how risk and return are measured for portfolios, the ideas behind diversification and factor exposures, how performance is evaluated on a risk-adjusted basis, and the specific risks that arise in investment management, including the use of leverage and the behaviour of hedge-fund strategies. The connecting idea with the rest of the curriculum is that the same measurement discipline applies: you quantify the exposure, judge it against objectives, and manage it deliberately. Understanding how a portfolio’s risk decomposes into systematic factors and idiosyncratic pieces ties this area back to the Foundations vocabulary from Chapter 2.
Current issues in financial markets
Current Issues is the smallest area and the most fluid, because it is built from a reading list of recent developments that GARP refreshes. It typically covers the risk themes of the moment, which in recent cycles have included machine-learning and model risk, climate-related financial risk and stress testing, the integration of finalised Basel rules, and risks around digital assets. Because the exact readings change, this is the one area where you must work from the current official list rather than older notes. The good news is that the underlying skill is the same one the whole qualification builds: take a new development and reason about what risk it creates and how a firm would measure and manage it. Treat Current Issues as an application of everything earlier, not as a separate body of facts to cram, and confirm the live reading list with GARP.
Chapter 7: Study plan and timeline
With the content mapped, the remaining work is pacing it. Three facts drive the plan: the parts must be taken in order, each part takes a serious block of hours, and the exams run only in a few windows a year, so the calendar, not your mood, sets the schedule.
Budget the hours by weight
Plan for roughly 200 to 240 hours per part, and spend them in proportion to the topic weights rather than evenly. In Part I that means the most time on Financial Markets and Products (30%) and Valuation and Risk Models (30%), with a solid early block on Quantitative Analysis (20%) because everything else depends on it. In Part II, the four core risk types (Market, Credit, Operational each 20%, Liquidity 15%) deserve the bulk of your hours, with focused passes on Investment Management (15%) and the live Current Issues reading (10%). Carrying the quantitative foundation through the whole plan, rather than finishing it and forgetting it, keeps the applied models from feeling like disconnected recipes.
Sequence Part I, then Part II
A realistic schedule for Part I runs about four to five months: months one and two on Foundations and Quantitative Analysis, months three and four on Financial Markets and Products then Valuation and Risk Models, and the final weeks on full-length timed practice. Part II follows the same shape over months five to eight: the four core risk types first, then Investment Management and Current Issues, then timed mocks. Many candidates spread the two parts across about a year and sit them in separate windows, which is the lower-stress route. Taking both on the same day is allowed, but Part II is only graded if Part I is passed, so it is a gamble most people avoid. To turn whichever timeline you choose into dated weeks for your own start date, use the free study-plan generator.
Build problem-solving throughout, not at the end
The decisive habit is volume of multiple-choice practice under time, started as soon as you have covered a topic rather than saved for the last fortnight. The FRM rewards applying the right model quickly, and that speed only comes from working many problems. Each time you miss one, trace it back to the formula or risk concept it tests and fix the understanding, not just the answer. If you are still weighing the FRM against a broader investment credential before committing the hours, the CFA vs FRM comparison covers how the two differ in scope and focus.
Chapter 8: Final preparation, exam day, and format
Final preparation
In the last weeks of each part, switch from learning new material to full-length, timed mocks that mirror the real paper in length and format. GARP includes complimentary practice exams with registration, and these are the most representative material you have, so use them late and treat each as both a diagnosis and an endurance session. Note which topic areas leak marks and revise those, and rehearse the four-hour pacing so the real sitting holds no surprises. Aim to be scoring comfortably above your target on fresh questions before you book. Make sure you are fluent with your approved calculator, because fumbling the device under time pressure costs marks that have nothing to do with your knowledge.
Certification beyond the exam
Passing both parts earns you the right to use the designation only once you also have the experience. Certification requires two years of relevant risk-related work experience, which you submit within five years of passing Part II. There is no education requirement to sit the exam, and the certification does not expire once granted, though GARP runs a voluntary continuing-professional-development programme. Plan to document your experience as you go so the final step is administrative rather than a scramble.
Exam day and format
On the day, each part is a four-hour, computer-based, multiple-choice paper taken at a test centre: Part I is 100 questions, Part II is 80 questions. An approved calculator is permitted; notes are not. The arithmetic of pacing matters, so budget your time per question and keep moving, flagging hard items to return to rather than stalling. Apply the discipline you built over the weeks of practice: identify which model the question wants, run it cleanly, and read what the result means before you commit to an answer. Because you prepared at full length and confirmed the current curriculum and weights against GARP’s own learning objectives, the format will feel familiar rather than overwhelming, which is exactly the advantage the preparation was meant to buy.