模块定位
Foundations of Risk Management 是 FRM Part I 的总论模块。它不是先教你推公式，而是先回答更底层的问题：风险是什么、企业为什么要管理风险、哪些风险值得承担、治理和监管如何约束风险承担、以及金融危机为什么会发生。
从 2026 官方目录看，这个模块围绕 11 个 readings 逐步展开：先从风险定义和管理工具出发，再进入企业如何用对冲和风险限额管理敞口，然后引出治理、信用风险转移、资产定价理论、多因子模型、数据治理、ERM、金融灾难、全球金融危机和职业伦理。
2026 官方 Reading 大纲
[FRM-1]The Building Blocks of Risk Management[FRM-2]How Do Firms Manage Financial Risk?[FRM-3]The Governance of Risk Management[FRM-4]Credit Risk Transfer Mechanisms[FRM-5]Modern Portfolio Theory (MPT) and the Capital Asset Pricing Model (CAPM)[FRM-6]The Arbitrage Pricing Theory and Multifactor Models of Risk and Return[FRM-7]Principles for Effective Data Aggregation and Risk Reporting[FRM-8]Enterprise Risk Management and Future Trends[FRM-9]Learning from Financial Disasters[FRM-10]Anatomy of the Great Financial Crisis of 2007-2009[FRM-11]GARP Code of Conduct
全书内在逻辑
把这 11 个 readings 串起来看，逻辑非常清楚：
- 先定义风险、损失和风险管理工具：
FRM-1 - 再看企业实务上如何管理风险敞口：
FRM-2 - 但工具不能脱离组织结构，所以引入治理：
FRM-3 - 治理之下，风险可以被转移和打包，但也会带来新风险：
FRM-4 - 随后进入“哪些风险该获得回报”的理论框架：
FRM-5和FRM-6 - 理论要落地，需要数据、报告和聚合能力：
FRM-7 - 再上升到企业层面的统筹框架：
FRM-8 - 之后用历史灾难和系统危机验证前面所有理论与制度是否有效：
FRM-9与FRM-10 - 最后回到职业操守，明确风险管理从业者的行为底线：
FRM-11
整本书思维导图
整本书图形思维导图
支持拖动、滚轮缩放、按钮缩放与重置视图
拖动空白区域可平移，鼠标滚轮可缩放。打印时保留当前图形，不显示控制按钮。
风险定义
风险类型
Expected vs Unexpected Loss
这是全模块的起点。官方 learning objectives 强调三件事：风险是什么、风险与回报是什么关系、以及企业面对的主要风险类别有哪些。你需要能区分风险管理与风险承担、预期损失与非预期损失、以及市场风险、信用风险、流动性风险、操作风险、模型风险等主要类型。
先建立“风险语言”，后面所有章节才能展开。没有这一章，后面谈对冲、治理、资产定价和危机分析都会缺乏共同坐标系。
关键概念
- Risk, risk factors, risk measurement
- Expected loss vs unexpected loss
- Risk-reward tradeoff
- Risk interaction and aggregation challenges
- Explain the concept of risk and compare risk management with risk taking.
- Evaluate quantitative and qualitative tools used to measure and manage risk, including ERM.
- Differentiate expected loss and unexpected loss.
- Interpret the relationship between risk and reward and the role of conflicts of interest.
- Describe major classes of risks and explain how risk factors interact and complicate aggregation.
Reading 思维导图
FRM-1 图形思维导图
对冲
风险限额
风险偏好
这一 reading 进入管理实践。官方要求你比较企业可采用的不同风险管理策略，理解何时应该对冲、何时应保留风险、以及风险 appetite 如何影响管理决策。这里的重点不是“所有风险都要 hedge”，而是理解不同风险工具的成本、局限和适用条件。
FRM-1 告诉你“风险是什么”，FRM-2 告诉你“企业实际上怎么处理这些风险”。
关键概念
- Hedging vs retaining risk
- Risk appetite and managerial choice
- Pricing risk, FX risk, interest rate risk
- Risk limits and derivatives usage
- Compare different risk management strategies and when each is appropriate.
- Explain how risk appetite affects risk management decisions.
- Evaluate the pros, cons, and implementation challenges of hedging.
- Apply methods to hedge pricing, FX, interest-rate, and operational risks.
- Assess the role of limits and derivatives in managing exposures.
Reading 思维导图
FRM-2 图形思维导图
董事会
激励机制
审计委员会
这章把风险管理从“工具问题”提升为“组织问题”。2026 官方 learning objectives 明确要求理解金融危机后监管与治理变化、董事会职责、risk appetite 与 business strategy 的关系、激励机制的影响，以及审计委员会在监督中的作用。
风险管理失败很多时候不是因为没人会算，而是因为治理结构让错误的行为被鼓励。FRM-3 正是这一层的核心。
关键概念
- Board oversight
- Audit committee
- Risk appetite and business strategy
- Incentives and interdependence of functions
- Explain post-crisis changes in regulation and corporate risk governance.
- Describe best practices for governing risk management processes.
- Explain the risk management responsibilities of the board.
- Evaluate how risk appetite, incentives, and business strategy interact.
- Assess the role of functional interdependence and the audit committee.
Reading 思维导图
FRM-3 图形思维导图
Credit Derivatives
Securitization
SPV
这一 reading 讨论信用风险如何被转移。你需要会比较不同类型的信用衍生品，理解传统信用风险缓释方式，理解 SPV 和证券化结构，并评估信用衍生品和次贷证券化在 2007-2009 危机中的作用。
风险转移提升了风险分担效率，但也可能制造不透明性、杠杆和错误激励，为后面的危机章节埋下伏笔。
关键概念
- Credit derivatives
- Traditional credit mitigation
- Securitization and SPV
- Subprime and structured product fragility
- Compare major credit derivatives and explain their uses.
- Explain traditional mechanisms used to mitigate credit risk.
- Evaluate the role of credit derivatives in the 2007-2009 crisis.
- Explain securitization, SPVs, and the risks of different securitized-product business models.
Reading 思维导图
FRM-4 图形思维导图
MPT
CAPM
Performance Measures
这章是风险收益理论核心 reading。官方要求你会解释 Markowitz efficient frontier、CAPM 的推导要素与假设、资本市场线与证券市场线的区别、beta 的含义与计算，以及一整组风险调整绩效指标，包括 Sharpe、Treynor、Jensen、tracking error、information ratio 和 Sortino ratio。
前面讲企业为什么和如何管理风险，这一章开始回答“市场到底补偿什么风险”。
关键概念
- Diversification and efficient frontier
- CAPM assumptions and expected return
- Capital market line vs security market line
- Beta and risk-adjusted performance
- Explain MPT and interpret the Markowitz efficient frontier.
- Interpret the derivation, assumptions, and components of CAPM.
- Compare the capital market line and security market line.
- Apply CAPM to expected return and beta calculations.
- Calculate and interpret Sharpe, Treynor, Jensen, tracking error, information ratio, and Sortino ratio.
Reading 思维导图
FRM-5 图形思维导图
APT
Multifactor
Fama-French
这章是对 CAPM 的扩展。官方要求理解 APT 的假设并与 CAPM 比较，理解因子 beta 如何进入多因子模型，知道多因子模型在对冲中的挑战，并能够用单因子或多因子模型计算资产预期收益，还要掌握 Fama-French 三因子模型。
CAPM 是单因子世界，APT 和 multifactor 进一步承认真实世界中的风险来源不止市场组合一个。
关键概念
- APT vs CAPM
- Factor betas
- Hedging multiple factors
- Fama-French three-factor model
- Explain APT, its assumptions, and compare it with CAPM.
- Describe factor betas and the practical challenges of multifactor hedging.
- Calculate expected return using single-factor and multifactor models.
- Explain how to hedge exposure to multiple factors.
- Describe and apply the Fama-French three-factor model.
Reading 思维导图
FRM-6 图形思维导图
BCBS 239
Risk Data
Reporting
2026 官方 learning objectives 对这章的要求很直接：理解高质量风险数据聚合与报告的收益，识别差数据、差架构和弱治理带来的后果，理解数据架构、IT 基础设施和风险报告实践的关键特征。这是危机后监管特别强调的底层能力。
没有可靠数据，前面所有风险计量、风险偏好、限额与治理都无法真正运行。
关键概念
- Benefits of effective aggregation
- Data quality and poor-data consequences
- Governance principles
- Architecture, IT infrastructure, reporting practices
- Explain the benefits of effective risk data aggregation and reporting.
- Explain implementation challenges and the consequences of poor-quality data.
- Describe governance principles for aggregation and reporting.
- Describe effective data architecture, IT infrastructure, and reporting practices.
Reading 思维导图
FRM-7 图形思维导图
ERM
Risk Culture
Scenario Analysis
这一 reading 是企业层面的总框架。官方要求你区分 ERM 和传统 silo-based 风险管理，理解企业为什么推 ERM，如何治理和实施 ERM，什么是 strong corporate risk culture，以及 scenario analysis 和 stress testing 在 ERM / capital planning 中的作用。
这章把前面所有分散的风险概念和控制实践，整合为组织层面的统一管理框架。
关键概念
- ERM vs silo-based management
- ERM motivation and governance
- Risk culture
- Scenario analysis and stress testing
- Describe ERM and compare it with silo-based risk management.
- Describe the motivations for adopting ERM.
- Explain best practices for ERM governance and implementation.
- Describe strong risk culture and the challenges of building it.
- Explain how scenario analysis supports ERM, stress testing, and capital planning.
Reading 思维导图
FRM-8 图形思维导图
案例题
尾部风险
风险失败复盘
这是非常典型的 FRM reading：用历史灾难反向检验风险管理失败机制。官方 learning objectives 点名要求你分析多类案例，包括利率风险、融资流动性风险、对冲失误、模型风险、rogue trading、financial engineering、声誉风险、治理失败和 cyber risk。
真正的风险教育不是只学模型，而是学“灾难是怎么一步步形成的”。这章就是把抽象概念变成事故链。
关键概念
- Interest rate risk cases
- Funding liquidity risk cases
- Model risk and rogue trading
- Governance, reputation, cyber risk
- Analyze the factors behind major historical financial disasters.
- Explain lessons from interest-rate, funding-liquidity, and hedging failures.
- Evaluate model risk and rogue trading case lessons.
- Review failures involving financial engineering, reputation, governance, and cyber risk.
Reading 思维导图
FRM-9 图形思维导图
Subprime
CDOs
Systemic Risk
这章是系统性危机总复盘。2026 官方要求你描述危机背景、梳理危机事件链、说明 subprime mortgages 和 CDOs 的作用，比较银行、金融中介、按揭经纪人和评级机构的角色，并理解短期批发融资市场如何放大系统性风险，以及央行如何应对危机。
如果 FRM-9 是多个案例拼图，FRM-10 就是把拼图放进一场全球危机中，看风险如何从局部错误演化成系统性崩溃。
关键概念
- Subprime mortgages and CDOs
- Institutional roles in the crisis
- Short-term wholesale funding
- Central bank response and systemic stabilization
- Describe the background and major events of the 2007-2009 crisis.
- Explain the build-up and the main contributing factors.
- Explain the role of subprime mortgages and CDOs.
- Compare the roles of banks, intermediaries, mortgage lenders, and rating agencies.
- Describe the role of wholesale funding markets and central bank responses.
Reading 思维导图
FRM-10 图形思维导图
Ethics
Integrity
Conflicts of Interest
最后一章回到职业伦理。官方要求理解 FRM 候选人和持证人的责任，包括职业诚信、保密义务、利益冲突处理、一般风险管理实践的遵守，以及违反 Code of Conduct 的后果。这部分虽然概念上不复杂，但考试中常出现边界判断题。
风险管理是高影响职业。模型和制度再强，如果从业者的行为底线失守，整个体系仍然会失效。
关键概念
- Professional integrity
- Ethical conduct
- Conflicts of interest
- Confidentiality and consequences of misconduct
- Describe member responsibilities related to integrity and ethical conduct.
- Explain expectations around conflicts of interest and confidentiality.
- Describe adherence to generally accepted practices in risk management.
- Describe the consequences of violating the GARP Code of Conduct.
Reading 思维导图
FRM-11 图形思维导图
最后复习路径
按 2026 官方 reading 复习时，我建议你按下面顺序抓主线：
- 先通读
FRM-1到FRM-3，把“风险是什么、企业怎么管、治理怎么管”建立起来 - 再读
FRM-4，理解风险转移的双刃剑效应 - 接着重点突破
FRM-5与FRM-6，这是理论和计算题感最强的部分 - 然后读
FRM-7与FRM-8，把治理延伸到数据和 ERM 层面 - 最后用
FRM-9与FRM-10做案例串联，再用FRM-11收尾
2026 Foundations Review Route
阅读顺序与知识推进关系图
说明：本版的 reading 名称和顺序，依据我刚提取到的 2026 官方
FRM Study Guide 与 FRM Learning Objectives 中的 Foundations of Risk Management 部分整理。相较上一版 HTML，这一版更适合与你手头的官方目录逐项对照复习。