PasskeyPrep is now on iPhone. Practise anywhere, even offline.PasskeyPrep is now on iPhone.Now on iPhone.Download on the App StoreGet the app
CISI Guide

CISI Risk & Compliance Qualifications: Which One to Sit

CISI risk and compliance is built from standalone Level 3 Awards rather than one fixed qualification. Compare the three papers, see how an Award becomes a Certificate, and pick the right first one.

7 min readUpdated 13 August 2026By Rueben Yu

Which CISI qualification should you take for compliance or risk?

CISI’s risk and compliance route is built from three standalone Level 3 Awards rather than one fixed qualification: Risk in Financial Services, Global Financial Compliance and Combating Financial Crime. Risk in Financial Services and Global Financial Compliance each pair with a CISI regulatory exam to complete the corresponding Level 3 Certificate. Combating Financial Crime stays an Award and instead counts as an Investment Operations Certificate technical unit and as a unit of the Level 6 Diploma in Investment Compliance.

Risk in Financial Services
100 questions, 120 minutes; for risk functions
Global Financial Compliance
100 questions, 120 minutes; for cross-border compliance
Combating Financial Crime
50 questions, 60 minutes; for onboarding and financial crime teams
Award vs Certificate
One paper earns the Level 3 Award; adding a CISI regulatory exam completes the Level 3 Certificate
Shortest first paper
Combating Financial Crime, at roughly half the study hours of the other two
Not covered by Passkey
The Level 5 Climate Risk Certificate and the Level 6 Diploma in Investment Compliance

CISI’s risk and compliance route is built from standalone Level 3 Awards rather than from one fixed qualification. Each of Risk in Financial Services, Global Financial Compliance and Combating Financial Crime is a qualification on its own. Risk in Financial Services and Global Financial Compliance each pair with a CISI regulatory exam to complete the corresponding Level 3 Certificate, so the route grows with you rather than committing you to three papers on day one.

How a CISI Level 3 Award becomes a Level 3 CertificateA two-step route diagram. First, sit one Level 3 Award: Risk in Financial Services, Global Financial Compliance or Combating Financial Crime, each of which stands on its own. Then, for Risk in Financial Services or Global Financial Compliance, add a CISI regulatory exam to complete the corresponding Level 3 Certificate. Combating Financial Crime works differently: it stays an Award and instead counts as an Investment Operations Certificate technical unit and as a unit of the Level 6 Diploma in Investment Compliance.ONE PAPER IS AN AWARD - TWO PAPERS CAN BE A CERTIFICATESit one Level 3 AwardRisk, Global FinancialCompliance or Financial CrimeAdd a CISI regulatory examCompletes the matchingLevel 3 CertificateRisk in Financial Services and Global Financial Compliance each pair with a regulatory exam for the corresponding Level 3 Certificate. Combating Financial Crime takes a different route.
Risk in Financial Services and Global Financial Compliance each pair with a regulatory exam for the corresponding Level 3 Certificate. Combating Financial Crime takes a different route.

That structure is the reason this side of the CISI catalogue confuses people. There is no single “compliance diploma” to enrol on at Level 3. You pick the paper that matches the work you do, and you decide later whether to add a second one.

The three papers

Paper Questions Time Who it is for
Risk in Financial Services 100 120 min Risk functions, and anyone moving from operations or audit into risk
Global Financial Compliance 100 120 min Compliance officers and MLROs working across more than one jurisdiction
Combating Financial Crime 50 60 min Onboarding, client due diligence and financial crime teams

Risk in Financial Services is the broadest of the three: ten elements covering operational, credit, market, investment, liquidity and model risk, plus governance and enterprise risk management. Operational, Credit and Market Risk are 45 of its 100 marks between them.

Global Financial Compliance is the international paper. Its frame of reference is a firm answering to more than one regulator, so extra-territorial legislation, the running of a compliance function and professional ethics carry most of it. Its five elements are weighted unusually closely, from 17 to 24 questions each, which means no element is safe to skip.

Combating Financial Crime is the shortest and the most concentrated: 50 questions entirely on financial crime, with Financial Crime Risk Management alone worth 13 of them. It is the quickest of the three to prepare for and the easiest to fit around a job.

Award or Certificate?

Sitting one paper earns the standalone Level 3 Award in that subject. Adding a CISI regulatory exam to Risk in Financial Services or to Global Financial Compliance completes the corresponding Level 3 Certificate, which is the version most employers recognise on a CV. The distinction matters when you are describing what you hold, and it is worth getting right in an application.

Combating Financial Crime works differently. It stays a Level 3 Award in its own right, and rather than pairing into a certificate it counts as a technical unit of the Investment Operations Certificate and as a unit of the Level 6 Diploma in Investment Compliance, where UK Regulation & Professional Integrity is another. So one sitting of Combating Financial Crime can serve a qualification you have not decided to start yet, which makes it a low-risk first paper.

Which one should you sit first?

Match the paper to the desk. If your work is exposure, limits, capital or loss events, Risk in Financial Services is the honest fit. If it is monitoring, advisory compliance or a regulator relationship across more than one jurisdiction, Global Financial Compliance is. If it is onboarding, screening, due diligence or suspicious activity reporting, Combating Financial Crime is, and it is also the cheapest way to find out whether this side of the industry suits you before committing 100 hours to a longer paper.

If you are choosing on time rather than on role, Combating Financial Crime is 50 questions in an hour against 100 questions in two hours for the other two, and CISI suggests roughly half the study hours. It is the natural first paper for someone testing the water.

How long each paper takes

CISI suggests around 100 hours for Risk in Financial Services and for Global Financial Compliance, and roughly half that for Combating Financial Crime. The 100-question papers are two hours in the exam room; Combating Financial Crime is one.

Those hours are a guide for someone meeting the material for the first time. If you already work in the function the paper describes, the honest saving comes on the chapters you live in and nowhere else: the frameworks, the named legislation and the definitions still have to be learned to exam precision, and that is the part experience does not shortcut.

What this route does not cover

CISI also runs a Level 5 Climate Risk Certificate and the Level 6 Diploma in Investment Compliance on this side of the catalogue. Passkey does not support either, and neither is a sensible starting point: both assume the Level 3 material below them. If your firm has asked for one of those specifically, the three papers above are still the groundwork.

Where Passkey fits

Passkey covers all three Level 3 papers, and it also covers UK Financial Regulation, the regulatory exam most candidates pair with them. Each paper has a practice bank, timed mocks weighted to its real element split, study notes and flashcards, and one payment of £59 covers every supported exam for 90 days rather than one paper at a time.

Passkey is an independent study tool. It is not affiliated with, endorsed by, or accredited by the Chartered Institute for Securities & Investment, and it does not replace the official workbook. The qualification comes from CISI.

Go deeper on each paper

Frequently asked questions

What CISI qualifications are there for compliance and risk?

At Level 3 the main three are Risk in Financial Services, Global Financial Compliance and Combating Financial Crime, each a standalone Level 3 Award. CISI also runs a Level 5 Climate Risk Certificate and the Level 6 Diploma in Investment Compliance, both of which assume the Level 3 material below them.

What is the difference between the Award and the Certificate?

Sitting one paper earns the standalone Level 3 Award in that subject. Adding a CISI regulatory exam to Risk in Financial Services or Global Financial Compliance completes the corresponding Level 3 Certificate, which is the version most employers recognise.

Which compliance paper should I sit first?

Match it to your role: Risk in Financial Services for exposure, limits and loss events; Global Financial Compliance for monitoring and advisory compliance across jurisdictions; Combating Financial Crime for onboarding, screening and due diligence. Combating Financial Crime is also the shortest at 50 questions in 60 minutes, which makes it the easiest first paper.

Does Combating Financial Crime count towards anything else?

Yes. As well as being a Level 3 Award in its own right it counts as a technical unit of the Investment Operations Certificate and as a unit of the Level 6 Diploma in Investment Compliance, where UK Regulation & Professional Integrity is another. One sitting can therefore serve a qualification you have not started yet.

Written by

Rueben Yu · Markets professional, CISI candidate

Rueben works in capital markets and is sitting the CISI exams himself. Every Passkey guide is written from the inside, against the current syllabus and current UK regulation.

Find your weak spots before exam day.

Start free with chapter 1 of every supported exam, take the free Introduction diagnostic for a short foundation-level snapshot, then unlock everything for one payment of £59.

Start free — chapter 1 of every supported examSee the £59 offer

Keep reading