Operational Risk and Resilience for FRM Part 2: 2026 Guide
A clear 2026 guide to Operational Risk and Resilience in FRM Part II, including exam weight, core themes, study approach and revision checklist.
Operational Risk and Resilience carries an approximate 20% weighting in FRM Part II. It is one of six knowledge areas in the 2026 curriculum and tests whether you can identify non-financial risk, evaluate controls and strengthen an institution's ability to continue critical services.
Operational Risk and Resilience at a glance
| Item | 2026 exam detail |
|---|---|
| Exam | FRM Part II |
| Approximate weighting | 20% |
| Indicative share | Roughly about 20 of 80 questions, although GARP does not promise an exact count by topic |
| Question style | Multiple choice, with emphasis on selecting and applying the right concept |
GARP publishes approximate domain weights, so treat the question count as a planning guide rather than a guarantee. Always check the current FRM Learning Objectives before building your final study checklist.
What does Operational Risk and Resilience cover?
Operational Risk and Resilience covers failures of people, processes, systems and external events. The 2026 domain links governance and risk assessment with cyber, third-party, model, conduct and business-continuity concerns.
Governance and risk appetite
Roles, accountability, culture, policies and escalation determine whether operational risks are recognised and acted on.
Risk and control assessment
Loss data, scenarios, RCSAs, key risk indicators and control testing provide complementary evidence rather than one definitive number.
Operational resilience
Institutions identify important services, set impact tolerances, map dependencies and test whether disruption can be contained and recovered from.
Technology, cyber and third-party risk
Complex service chains create concentration, access, data, change-management and recovery risks that contracts alone cannot remove.
Model, conduct and financial-crime risk
Weak assumptions, incentives, governance or monitoring can create losses even when a core transaction is functioning as designed.
How this topic connects to the rest of FRM
Operational events can trigger market, credit and liquidity losses. The domain also builds on Part I governance and professional-conduct ideas while adding resilience and control design.
For the broader exam structure, use our FRM Part I and Part II comparison. When you are ready to plan the full qualification, see the FRM course overview and FRM study plan.
How to study Operational Risk and Resilience
- Start with the learning objectives. Turn each command word into a task: define, calculate, compare, interpret or recommend.
- Build understanding before speed. Work through a small set of examples without timing yourself, then repeat them under exam conditions.
- Keep an error log. Record whether each mistake came from a concept gap, a formula error, a misread question or poor time management.
- Mix topics. Once you can solve questions by chapter, combine this area with other domains so that you must first identify the method.
- Finish with timed practice. Use the question bank inside your Learnsignal subscription and the official GARP practice exams available to registered candidates.
Common mistakes to avoid
- Reducing operational risk to fraud or system outages.
- Treating a control's existence as proof that it works.
- Confusing business continuity with the broader outcome of operational resilience.
- Ignoring concentration in third-party and technology dependencies.
- Using historical loss data without scenario or forward-looking evidence.
Revision checklist
- Classify operational events and their causes.
- Compare RCSAs, KRIs, loss data and scenarios.
- Assess control design and operating effectiveness.
- Explain important services, impact tolerances and resilience testing.
- Evaluate cyber, third-party, model and conduct-risk responses.
Frequently asked questions
How much of FRM Part II is Operational Risk and Resilience?
The approximate weighting is 20%.
Is operational resilience the same as business continuity?
No. Continuity plans support resilience, but resilience focuses on maintaining important services within acceptable disruption levels.
Is the topic mainly qualitative?
It is framework-heavy, but questions still require disciplined application, comparison and some quantitative interpretation.
Where can I learn the broader business context?
See our practical guide to operational risk management in finance.
Use the current 2026 curriculum
GARP reviews the FRM curriculum each year. This guide reflects the 2026 structure, but the official FRM study-materials page, Study Guide and Learning Objectives remain the source of truth for your exam window.
This page was last updated:
Abhijit Biswas
Expert Tutor at Learnsignal
Qualified professional with years of experience in teaching and helping students achieve their accounting qualifications.
View all posts by Abhijit Biswas
