Certified Enterprise Risk Professional (CERP) Practice Tests

The 2026 CERP outline covers board and senior-management oversight (8%), policies, procedures, and limits (12%), management information systems (11%), the control framework (7%), risk identification (15%), risk measurement and evaluation (13%), risk response (18%), and risk monitoring (16%). The emphasis is enterprise risk management in U.S. banking, not a generic risk-management syllabus.

CERP contains 200 multiple-choice questions in four hours, including a small number of unscored items. ABA reports scores from 200 to 800 and requires 500 to pass. Candidates also need qualifying U.S.-based banking experience: either a bachelor's degree plus five years in banking with three years in enterprise risk, or seven years in banking with five years in enterprise risk.

Use these 749 questions to rehearse how governance, appetite, limits, data, controls, measurement, response, and monitoring connect. Study at board, business-line, and independent-risk-function levels, because many plausible answers describe a useful activity while only one assigns it to the right owner at the right point in the risk-management cycle.

The ABA Certified Enterprise Risk Professional (CERP) validates enterprise risk management in the U.S. banking industry. The 2026 outline follows the full risk cycle from governance, policies, information, and controls through identification, measurement, response, and monitoring.

Its eight weighted domains are Board and Senior Management Oversight 8%, Policies, Procedures, and Limits 12%, Management Information Systems 11%, Control Framework 7%, Risk Identification 15%, Risk Measurement and Evaluation 13%, Risk Responses 18%, and Risk Monitoring 16%.

The CERP is designed for experienced risk management professionals working within U.S. banking institutions. Target roles include Chief Risk Officers, enterprise risk managers, credit risk analysts, operational risk officers, financial risk managers, and compliance officers who have significant risk oversight responsibilities. The certification is appropriate for mid-to-senior level professionals who are either currently managing risk functions or seeking to formalize and advance their enterprise risk expertise.

Given the eligibility requirements, candidates are expected to have substantial hands-on experience in the field—making this credential most suitable for seasoned practitioners rather than early-career professionals. It is particularly valuable for those seeking leadership roles within bank risk departments or those looking to distinguish themselves in a competitive hiring environment.

The ABA specifies experience-based eligibility pathways rather than mandatory formal education requirements. Candidates with a bachelor's degree must have at least five years of experience in the banking industry, of which a minimum of three years must be in a risk management role or a closely related function. Candidates without a degree must have at least seven years of banking industry experience, with at least five years in risk management or a closely related role.

All experience must be U.S.-based, as the CERP is anchored to U.S. banking laws, regulations, and supervisory frameworks. While no specific prior certifications are required, familiarity with ABA training programs and a strong working knowledge of bank regulatory requirements, credit risk analysis, financial risk measurement, and operational risk frameworks is strongly recommended before sitting for the exam.

CERP contains 200 multiple-choice questions and allows four hours. ABA says a small number of unscored questions are included. Results use a 200-800 scaled score, with 500 required to pass.

The exam is offered during published 30-day testing windows at approved sites or by live remote proctoring. After an unsuccessful attempt, ABA requires a 90-day wait, and candidates must pass within three years of their first attempt.

CERP demonstrates enterprise-risk knowledge tailored to U.S. banking, including the connections among board oversight, risk appetite, policies, data, controls, measurement, response, and monitoring. It is relevant to enterprise risk, operational risk, governance, controls, and risk-leadership roles in banks and related institutions.

Maintaining the credential requires 60 continuing-education credits during each three-year cycle, the annual renewal fee, and continued adherence to ABA's professional ethics requirements.