Identifying, quantifying and actively managing delivery risk — before it becomes an issue log entry.
Most risk registers are theatre. A spreadsheet is updated monthly, reviewed in a governance meeting nobody wanted to attend, and acted on almost never. The risks that actually materialise are frequently on it — scored, owned, and entirely unmanaged.
Real risk management changes decisions. It reshapes the plan, moves the money, changes who is doing what, and occasionally stops the work altogether. Certified Risk Manager Plus assesses whether you can do that version rather than the version that produces a well-formatted register.
The scenarios are drawn from where risk practice actually breaks down. A risk everyone has known about for months that nobody will own because owning it means being accountable for it. A mitigation that costs more than the exposure it reduces. A probability assessment that is really a political statement about whose fault it will be. An escalation that produced a meeting instead of a decision, and then another meeting.
The paper tests three things in particular: whether you can quantify exposure honestly when the honest number is unwelcome, whether your responses are proportionate rather than reflexive, and whether you can escalate in a way that forces a decision. That last skill is the one most practitioners never develop, and it is the one that separates a risk function that protects delivery from one that documents its failure.
The credential sits at Professional tier in the Specialised Practice track.
It sits in the Specialised Practice track at Professional tier, and is issued with a unique credential ID, a two-year validity period and an independently hosted digital badge.
Project and programme practitioners who own risk on live delivery, PMO staff responsible for risk governance, and delivery leads in environments where risk practice is actually scrutinised.
It is particularly relevant in regulated and safety-critical sectors — construction, infrastructure, financial services, healthcare, energy — where risk management is subject to external examination and a register that exists only for audit purposes is a liability rather than a control.
The paper assumes Professional-level delivery experience. You should have owned risk on something real, which means having made a judgement call about whether an exposure was worth mitigating and lived with the consequence. It does not assume any particular risk framework or quantitative background; the mathematics involved is deliberately kept to what a practitioner would actually use.
It also suits project managers who want to specialise. Risk is one of the few delivery specialisms with a genuinely separate career track, and an assessed credential is the clearest way to signal the move.
The paper is weighted across five domains. Weightings show how much of the examination each area accounts for, so preparation can be planned against them.
| Domain | Weighting | |
|---|---|---|
| 01 | Delivery planning and scope control | 25% |
| 02 | Stakeholder engagement and governance | 20% |
| 03 | Risk, issue and dependency management | 20% |
| 04 | Schedule, cost and resource discipline | 20% |
| 05 | Closure, benefits and lessons learned | 15% |
Risk specialism is one of the clearest ways to differentiate inside delivery, because the supply of people who are genuinely good at it is much smaller than the supply of people who maintain registers.
Sectors where risk is regulated screen specifically for it. In construction, infrastructure, financial services and healthcare, risk competence is frequently a condition of the role rather than a nice-to-have, and an externally assessed credential is the most efficient way to evidence it at application stage.
It also raises your value inside a delivery team without requiring a move. The practitioner who can quantify an exposure credibly and get a decision out of a steering group is doing something that visibly protects the programme, and that visibility compounds.
For those building a specialised profile, this pairs well with Schedule Manager Plus — risk and schedule are the two specialisms most often assessed together on capital projects, and holding both is a recognisable combination in that market.
No. The mathematics involved is limited to what a delivery practitioner would actually use — expected value, exposure ranges, simple sensitivity. The paper assesses judgement about risk, not statistical technique.
No. It assesses risk practice rather than a named methodology, so whichever framework your organisation uses, the judgement being tested is the same. Scenarios are drawn from live delivery situations rather than from any one standard.
Professional-level. You should have owned risk on real work — meaning you have decided whether an exposure was worth mitigating and lived with the outcome. Without that, the scenarios will read as abstract.
Five weighted domains, with risk identification, quantification, response planning and escalation carrying the heaviest weighting. Schedule, cost and governance are assessed through the lens of risk rather than independently.
Yes, though it is most obviously valuable in regulated and safety-critical environments. Any delivery where an unmanaged exposure could cost materially benefits from a practitioner who can quantify and escalate properly.
No. We assess and credential; we do not train. The assessment domains and their weightings are published so you can prepare against the actual paper using whatever route suits you.
Two years from issue, with the expiry date shown on the certificate and the public verification record. Renewal is by re-examination rather than by paying a maintenance fee.
One proctored examination attempt, the certificate with credential ID and QR code, the digital badge, and the public register entry. There is nothing further to buy.
A domain-level breakdown is issued with your result, and a retake can be booked from your dashboard at a reduced fee with no waiting period.
By entering the credential ID on our public register, or scanning the QR code on the certificate. The digital badge also carries its own independent verification page.