CISI Risk in Financial Services Free Sample Paper: Three Lines of Defence Topic Preview

Q: Are these CISI Risk in Financial Services sample questions updated for 2026?

Yes, these free practice questions are continuously reviewed and updated to reflect the latest official syllabus changes and regulatory requirements for candidates in international markets.

Q: How similar is this sample paper to the real CISI Risk in Financial Services exam?

These questions preview the practice style available in the course, but they cover only Three Lines of Defence. This is not a full mock exam and the result cannot measure your overall exam readiness.

Q: What does my CISI Risk in Financial Services topic-preview score mean?

It reflects only your answers to 15 questions from Three Lines of Defence. Other syllabus areas are not tested here, so the score is not a pass or fail result and should not be used to predict your official exam performance.

Q: Can I retake this free topic preview?

Yes. You can retake these 15 questions, but repeated attempts cover the same single topic. The full course unlocks all 500 practice questions and broader mock-exam practice.

Question 1

In the 'Three Lines of Defence' model, who is designated as the primary 'risk owner'?

Accepted Answer

The business units and operational areas

Answer

The independent risk management function

Answer

The Board of Directors

Answer

The internal audit department

Question 2

A compliance department drafts a new limit policy for trading activities. Which line of defence is performing this action?

Accepted Answer

Second Line of Defence

Answer

First Line of Defence

Answer

Third Line of Defence

Answer

Fourth Line of Defence

Question 3

Why is it incorrect to assume that a strong compliance department eliminates the need for the front office to manage risk?

Accepted Answer

Because the front office originates the risk and remains the primary risk owner responsible for day-to-day mitigation.

Answer

Because compliance only deals with financial reporting, not trading risks.

Answer

Because the Board directly manages all day-to-day risks.

Answer

Because the front office is the third line of defence and must audit compliance.

Question 4

Which committee typically oversees the work of the Third Line of Defence?

Accepted Answer

The Audit Committee

Answer

The Risk Committee

Answer

The Executive Trading Committee

Answer

The Remuneration Committee

Question 5

Which of the following is a primary responsibility of the Third Line of Defence?

Accepted Answer

Providing independent, objective assurance to the board that the first and second lines are functioning effectively.

Answer

Identifying and controlling risks on a day-to-day basis.

Answer

Drafting risk management policies and setting limits.

Answer

Defining the firm's overall risk appetite.

Question 6

What is a common pitfall regarding the responsibilities of the risk management function (Second Line of Defence)?

Accepted Answer

Believing that the risk management function owns the risk instead of the business units.

Answer

Thinking they are responsible for designing the firm's strategic objectives.

Answer

Assuming they report directly to the Head of Trading.

Answer

Assuming they provide independent assurance to the Audit Committee.

Question 7

Which of the following best describes the core function of the First Line of Defence?

Accepted Answer

Identifying, assessing, controlling, and mitigating risks on a day-to-day basis.

Answer

Providing independent assurance to the Audit Committee.

Answer

Drafting risk management policies for the entire organization.

Answer

Challenging the Board on its strategic objectives.

Question 8

A bank's front-office traders have started trading a complex new derivative. Who is fundamentally responsible for owning the risks associated with this new product?

Accepted Answer

The front-office traders and their business unit

Answer

The Board of Directors

Answer

The Internal Audit team

Answer

The Chief Risk Officer

Question 9

The Risk Committee is generally responsible for overseeing which line of defence?

Accepted Answer

Second Line of Defence

Answer

First Line of Defence

Answer

External Auditors

Answer

Third Line of Defence

Question 10

In the context of the Three Lines of Defence, what is the relationship between the first and second lines?

Accepted Answer

The second line provides independent oversight and challenge to the first line.

Answer

They both report directly to the Audit Committee.

Answer

The first line audits the second line.

Answer

The second line originates the risk, while the first line sets the limits.

Question 11

An internal audit team is assessing a firm's risk controls. A common misconception about their role is that:

Accepted Answer

They are responsible for designing the firm's internal controls.

Answer

They provide objective assurance to the board.

Answer

They function independently from the revenue-generating business units.

Answer

They evaluate the effectiveness of the first and second lines of defence.

Question 12

Which component of a firm is primarily responsible for ensuring that the first line is operating within the board-approved risk appetite?

Accepted Answer

The Second Line of Defence

Answer

The firm's shareholders

Answer

External auditors

Answer

The front office business unit

Question 13

What is the primary output of the Third Line of Defence to the Board?

Accepted Answer

Independent, objective assurance that the control environment is robust.

Answer

Daily trading limits for the front office.

Answer

A newly formulated risk appetite statement.

Answer

A list of prospective clients for the business units.

Question 14

In the Three Lines of Defence model, the compliance department is typically situated within the:

Accepted Answer

Second Line of Defence

Answer

Fourth Line of Defence

Answer

First Line of Defence

Answer

Third Line of Defence

Question 15

Which of the following is an example of an activity performed by the First Line of Defence?

Accepted Answer

A trader assessing the credit risk of a new counterparty before executing a trade.

Answer

Internal audit reviewing the effectiveness of the firm's IT security controls.

Answer

The compliance team drafting a new anti-money laundering policy.

Answer

The Risk Committee setting the overall corporate risk appetite.

CISI Risk in Financial Services Free Sample Paper & Practice Questions

In the 'Three Lines of Defence' model, who is designated as the primary 'risk owner'?

CISI Risk in Financial Services

Unlock 20% Discount

About This Free Sample Paper

Why Use a Question Bank & Mock Exams?

Frequently Asked Questions

Pass on Your First Attempt

CISI Risk in Financial Services Free Sample Paper & Practice Questions

In the 'Three Lines of Defence' model, who is designated as the primary 'risk owner'?

CISI Risk in Financial Services

Unlock 20% Discount

About This Free Sample Paper

Why Use a Question Bank & Mock Exams?

Frequently Asked Questions

Pass on Your First Attempt

Try Before You Buy