Need immediate help?πŸ‡ΊπŸ‡Έ+1 (773) 729-6444
Contact Usinfo@globalcybers.com
GlobalCybers
THE INSTITUTES Β· RISK MANAGEMENT Β· SHORT COURSE SEQUENCE Β· ASSESSMENT, CONTROL, FINANCING Β· ENTERPRISE VARIANT

ARM Certification Guide 2026

A focused designation covering the risk management process end to end: assessment, control and financing, aimed at the buyer of insurance rather than the seller, with an enterprise risk variant available.

Updated August 2026

By GlobalCybers Editorial Team Β· Reviewed by Douglas Whitfield, CPA Β· Published Aug 2026

Direct Answer

What is ARM and how does it differ from an insurance designation?

ARM is the Associate in Risk Management designation from The Institutes, and its perspective is what distinguishes it: it is written from the position of the organisation managing risk rather than the insurer accepting it. Insurance designations teach coverage, underwriting and claims from the carrier's side; this teaches the risk management process from the buyer's side, where insurance is only one of several tools. The course sequence follows that process: risk assessment, covering identification and analysis of exposures across property, liability, personnel and net income; risk control, covering avoidance, loss prevention, loss reduction, separation, duplication and diversification; and risk financing, covering retention, insurance, captives, alternative risk transfer and the analysis that decides between them. It is a short sequence relative to the senior insurance designations, which makes it achievable in a reasonable period, and an enterprise risk variant addresses risk management at organisational strategy level rather than at the level of insurable hazards. Courses share credit with other designations from the same body, and the designation does not expire.

ARM β€” Associate in Risk Management β€” badge illustration. Issued by ARM β€” Associate in Risk Management. Awarding body The Institutes, Sequence Short.
ARM β€” Associate in Risk Management β€” THE INSTITUTES Β· RISK MANAGEMENT Β· SHORT COURSE SEQUENCE Β· ASSESSMENT, CONTROL, FINANCING Β· ENTERPRISE VARIANT
Key takeaways
  • ARM is written from the perspective of the organisation managing risk, not the insurer accepting it.
  • The sequence follows risk assessment, risk control and risk financing in that deliberate order.
  • An enterprise risk management variant addresses strategic organisation-wide risk instead of insurable hazards.
  • Courses share credit with other designations from the same body, and the designation does not expire.

ARM at a glance

CostCourses and examinations are priced individually by the awarding body and revised periodically β€” check its current fee schedule
DurationA short course sequence, typically completed within a year or two alongside full-time work
Issued byThe Institutes
FormatA sequence of courses each with its own examination, plus an ethics requirement
ExpiryThe designation does not expire
Who needs itCorporate risk managers, insurance brokers advising commercial clients, safety and claims professionals, and finance staff responsible for insurance programmes
PerspectiveWritten from the organisation buying and managing risk rather than the insurer accepting it
VariantAn enterprise risk management variant addresses strategic and organisation-wide risk rather than insurable hazards alone

Sources: The Institutes β€” Associate in Risk Management Β· The Institutes β€” designations and courses. Reviewed August 2026 by the GlobalCybers team.

Awarding body
The Institutes
Sequence
Short
Perspective
Risk buyer

The Risk Management Process as a Course Sequence

Assessment, control, financing

The sequence follows the discipline's own logic. Assessment identifies and analyses exposures β€” property, liability, personnel and net income β€” before anything is bought. Control covers the techniques that change the risk itself: avoidance, loss prevention, loss reduction, separation, duplication and diversification. Financing then decides how what remains is paid for: retention, insurance, captives and alternative transfer. Buying insurance before completing the first two steps is the error the whole sequence exists to prevent.

Where it sits

Length: A short sequence relative to senior insurance designations, achievable in a reasonable period
Shared credit: Courses count toward other designations from the same body, including the senior property and casualty designation
Enterprise variant: A separate variant addresses risk management at organisational strategy level
Ethics: An ethics requirement applies as with the body's other designations
Audience: Corporate risk managers and the brokers advising them, rather than carrier underwriters

Where risk management designations fit

Risk professionals appear across financial risk specialist and management occupations in federal wage statistics depending on their focus. This designation is aimed at operational and insurable risk management inside organisations and at the broking side advising them, which is a different population from the financial risk community in banks.

$117,330
BLS OEWS May 2025 national median for financial risk specialists (SOC 13-2054), the occupation most holders work in
Operational risk, not financial risk
This designation addresses insurable and operational exposures inside organisations, a different discipline from the market and credit risk work certified by financial risk credentials
$196,110
90th-percentile pay for financial risk specialists β€” where the most senior credentialed practitioners concentrate

GlobalCybers reimburses certification fees after a successful permanent placement through our network.

What ARM Covers, Assessment Through Financing

πŸ”

Exposure Identification

Systematically finding what could go wrong across property, liability, people and earnings, including exposures that never appear on an insurance schedule.

πŸ“Š

Loss Analysis

Frequency and severity analysis, loss forecasting from limited data, and distinguishing the losses that are budgetable from those that are existential.

πŸ› οΈ

Risk Control

Avoidance, prevention, reduction, separation, duplication and diversification β€” the techniques that change the risk rather than paying for it.

🏦

Retention

Deductibles, self-insured retentions and formal self-insurance, and the analysis of what an organisation can genuinely absorb.

🏝️

Captives & Transfer

Captive insurance structures, alternative risk transfer and when they make sense against conventional insurance.

🧭

Enterprise Risk

The variant's territory: strategic, operational, financial and hazard risk considered together at organisational level rather than exposure by exposure.

How do you earn the ARM designation, step by step?

1

Decide between the standard and enterprise variants

The standard sequence concentrates on insurable and operational exposures; the enterprise variant addresses organisation-wide strategic risk. Choose against your role β€” a corporate insurance manager and a risk officer advising the board need different material, and both variants exist for that reason.

2

Work the sequence in order

Assessment, control and financing follow the discipline's logic, and taking them out of order undermines the point. The sequence teaches that financing decisions come after exposures are understood and control options exhausted, which is exactly the discipline most organisations lack.

3

Apply it to your own organisation as you go

The material is directly applicable, and the fastest way to learn it is to run the process against your employer's actual exposures. Candidates who do this typically finish with a better risk register than their organisation had before, which is a useful argument for employer sponsorship.

4

Complete the ethics requirement and consider what it counts toward

An ethics requirement applies as with the body's other designations. Because courses share credit across designations, check what your completed courses contribute toward before deciding whether to continue to a broader qualification.

Corporate Practice, Not Regulation

Risk Management Is a Function, Not a Licensed Activity

Managing an organisation's risk is not a regulated activity and requires no credential. Brokers advising clients do need a state producer licence, which is separate. What creates demand for the designation is corporate practice: organisations with meaningful exposure employ risk managers, boards increasingly ask for risk oversight, and brokers competing on advice rather than price need people who can run the process rather than quote the market.

Awarding body
The Institutes
Regulation
None for risk management itself
Broker note
Producer licensing is separate

ARM, Frequently Asked Questions

How does this differ from a financial risk credential?

By the risks addressed. Financial risk credentials cover market, credit, liquidity and model risk in financial institutions, with heavy quantitative content. This covers hazard, operational and insurable risk in organisations of any kind β€” property damage, liability, business interruption, key personnel β€” using a process-driven rather than a statistical approach. They are separate disciplines that share only a word.

Is it useful for insurance brokers?

Very. Brokers advising commercial clients benefit from understanding the client's perspective β€” what the exposures are, which controls would reduce them, and how retention and transfer decisions should be made. Brokers who can run a risk management process rather than only place coverage compete on something other than price.

What is the enterprise variant for?

Risk management at organisational and strategic level: strategic, operational, financial and hazard risk considered together, with governance, appetite and reporting to the board. It suits people whose role is organisation-wide risk oversight rather than managing an insurance programme, and it reflects how the discipline has broadened.

Do I need insurance experience to take it?

It is not written to require carrier experience, and people come to it from safety, operations, finance and legal backgrounds as well as from insurance. The financing course does assume you will learn how insurance works, since it is one of the tools, but the perspective throughout is that of the organisation rather than the insurer.

Does it count toward larger designations?

Yes β€” courses from the same body frequently count toward more than one designation, including the senior property and casualty designation. Professionals who start here and later decide to pursue a broader qualification generally find their completed courses carry forward rather than being wasted.

Intent Network

Risk designated? Organisations need the process.

Corporate risk functions and commercial broking teams are recruiting. Set your industry and let employers reach you.

Join the Network β†’
Quick Reference
Awarding bodyThe Institutes
SequenceAssessment, control, financing
PerspectiveThe organisation, not the carrier
ExpiryNone
VariantEnterprise risk management
Related Certifications
Roles that need ARM

More about ARM

Why is risk identification harder than it looks?

Because organisations reliably see the exposures they already insure and miss the ones they do not β€” supply chain concentration, contractual liability assumed in agreements nobody in risk reviewed, reputational exposure, dependency on a single facility or system. Structured identification techniques exist precisely because unstructured brainstorming finds the familiar and stops.

How should retention levels be set?

By what the organisation can absorb without material harm, informed by loss history, volatility and balance sheet capacity, and reviewed as the organisation changes. Retentions set once and never revisited become mispriced in both directions, and organisations frequently buy low deductibles that amount to paying an insurer to handle predictable, budgetable losses.

When does a captive make sense?

When an organisation has enough predictable loss volume to benefit from retaining it formally, wants access to reinsurance markets directly, or faces coverage that the conventional market prices poorly. Captives carry real administrative, capital and regulatory obligations, so they suit large sustained programmes rather than being a general cost-saving device.

What does business continuity add to risk control?

It addresses the consequence rather than the cause: assuming a disruption happens, how quickly can critical operations resume and at what cost. Business interruption is often the largest exposure an organisation carries and the least well quantified, and continuity planning is the control technique that reduces it when prevention fails.

Your career research journey

Do your homework, then let the network do the rest.
πŸ’°
1. Know your salary
πŸͺͺ
2. Know your licences & certifications
🧭
3. Career guide
🎀
4. Interview preparation

Get the job, then keep rising

Free
Get Job β€” Join Network β†’
πŸš€
Step 5
Get matching jobs

Set your intent, matching jobs come to you. No applying.

πŸ“ˆ
Step 6
Career advancement plan

A roadmap to your next licence tier and higher pay band.

πŸŽ“
Step 7
We fund your fees

Once placed, we cover all certification, licence & career-guide fees.

⚑

Hiring trade workers?

Get a verified shortlist of 3–5 qualified candidates in 48 hours

GlobalCybers verifies active state licenses, trade certifications, Intent and right-to-work status before any candidate reaches your portal. Flat $2,999/mo RPO (Recruitment Process Outsourcing), up to 3 concurrent roles, or a free trial (pay on hire). 90-day written guarantee.

βœ“ Licenses verifiedβœ“ Intent & availability verified⚑ 48-hr shortlistπŸ›‘ 90-day guarantee
Hire Talent β†’See how staffing works β†’