← Back to CBT Library

Composite Risk Management

Composite Risk Management (CRM) and Operational Risk Management (ORM) training covering the 5-step process, risk assessment matrix, probability and severity, hazard identification, controls, residual risk, and after-action reviews. Based on ATP 5-19 (Army) and general DoD ORM doctrine.

41 questions and answers — updated 2025/2026
01

What are the five steps of the Composite Risk Management (CRM) process?

02

What Army doctrinal publication covers Composite Risk Management?

03

What is a hazard in the context of risk management?

04

What two factors are used to assess the level of risk for each hazard?

05

What are the four levels of severity in the risk assessment matrix?

06

What are the five levels of probability in the risk assessment matrix?

07

What are the four risk levels in the risk assessment matrix?

08

Who has the authority to accept risk in the military?

09

What is residual risk?

10

What is the difference between risk avoidance and risk mitigation?

11

What are the three types of controls used in risk management?

12

Which type of control is most preferred in the hierarchy of controls?

13

What is Step 1 of the CRM process — Identify Hazards — and how is it done?

14

What is an After-Action Review (AAR) and how does it relate to risk management?

15

True or False: Risk management only applies to combat operations.

16

What is the principle 'accept no unnecessary risk' in CRM?

17

Who is responsible for risk management in a military unit?

18

What is the difference between deliberate, time-critical, and strategic risk management?

19

Which of the following is NOT one of the five steps of CRM: (a) Identify hazards, (b) Assess hazards, (c) Assign blame, (d) Implement controls?

20

What is a risk assessment matrix and how is it used?

21

What does Step 5 — Supervise and Evaluate — involve?

22

What is the four principles of CRM?

23

What is a preliminary hazard analysis?

24

How does weather factor into the CRM process?

25

What is the role of SOPs in risk management?

26

True or False: Once controls are implemented, the CRM process is complete.

27

What is Operational Risk Management (ORM) and how does it differ from CRM?

28

How should risk management be integrated into the Military Decision-Making Process (MDMP)?

29

What is the difference between initial risk and residual risk on the risk assessment matrix?

30

What human factors contribute to risk in military operations?

31

What is complacency in risk management and why is it dangerous?

32

What is a go/no-go decision in risk management?

33

What is the 'Make risk decisions at the appropriate level' principle?

34

How do lessons learned feed back into the CRM process?

35

What is a near-miss and why is it important in risk management?

36

Which of the following best describes the purpose of CRM: (a) eliminate all risk from operations, (b) identify who is at fault when accidents happen, (c) preserve combat power by managing risk to an acceptable level, (d) create paperwork for commanders?

37

What role does training play in risk management?

38

How does fatigue affect risk in military operations?

39

What is risk transference in CRM?

40

What is the CRM worksheet (DD Form 2977) used for?

41

True or False: Risk management should be conducted only during the planning phase of an operation.

Know questions we're missing?

Submit your own Q&A pairs. AI reviews them for quality, then they go live for everyone.

Want to study these as flashcards?

Create a free study set with spaced repetition, multiple choice tests, and AI explanations.

Create Study Set