CISI Risk & Compliance Qualifications: Which One to Sit
CISI risk and compliance is built from standalone Level 3 Awards rather than one fixed qualification. Compare the three papers, see how an Award becomes a Certificate, and pick the right first one.
Which CISI qualification should you take for compliance or risk?
CISI’s risk and compliance route is built from three standalone Level 3 Awards rather than one fixed qualification: Risk in Financial Services, Global Financial Compliance and Combating Financial Crime. Risk in Financial Services and Global Financial Compliance each pair with a CISI regulatory exam to complete the corresponding Level 3 Certificate. Combating Financial Crime stays an Award and instead counts as an Investment Operations Certificate technical unit and as a unit of the Level 6 Diploma in Investment Compliance.
- Risk in Financial Services
- 100 questions, 120 minutes; for risk functions
- Global Financial Compliance
- 100 questions, 120 minutes; for cross-border compliance
- Combating Financial Crime
- 50 questions, 60 minutes; for onboarding and financial crime teams
- Award vs Certificate
- One paper earns the Level 3 Award; adding a CISI regulatory exam completes the Level 3 Certificate
- Shortest first paper
- Combating Financial Crime, at roughly half the study hours of the other two
- Not covered by Passkey
- The Level 5 Climate Risk Certificate and the Level 6 Diploma in Investment Compliance
CISI’s risk and compliance route is built from standalone Level 3 Awards rather than from one fixed qualification. Each of Risk in Financial Services, Global Financial Compliance and Combating Financial Crime is a qualification on its own. Risk in Financial Services and Global Financial Compliance each pair with a CISI regulatory exam to complete the corresponding Level 3 Certificate, so the route grows with you rather than committing you to three papers on day one.
That structure is the reason this side of the CISI catalogue confuses people. There is no single “compliance diploma” to enrol on at Level 3. You pick the paper that matches the work you do, and you decide later whether to add a second one.
The three papers
| Paper | Questions | Time | Who it is for |
|---|---|---|---|
| Risk in Financial Services | 100 | 120 min | Risk functions, and anyone moving from operations or audit into risk |
| Global Financial Compliance | 100 | 120 min | Compliance officers and MLROs working across more than one jurisdiction |
| Combating Financial Crime | 50 | 60 min | Onboarding, client due diligence and financial crime teams |
Risk in Financial Services is the broadest of the three: ten elements covering operational, credit, market, investment, liquidity and model risk, plus governance and enterprise risk management. Operational, Credit and Market Risk are 45 of its 100 marks between them.
Global Financial Compliance is the international paper. Its frame of reference is a firm answering to more than one regulator, so extra-territorial legislation, the running of a compliance function and professional ethics carry most of it. Its five elements are weighted unusually closely, from 17 to 24 questions each, which means no element is safe to skip.
Combating Financial Crime is the shortest and the most concentrated: 50 questions entirely on financial crime, with Financial Crime Risk Management alone worth 13 of them. It is the quickest of the three to prepare for and the easiest to fit around a job.
Award or Certificate?
Sitting one paper earns the standalone Level 3 Award in that subject. Adding a CISI regulatory exam to Risk in Financial Services or to Global Financial Compliance completes the corresponding Level 3 Certificate, which is the version most employers recognise on a CV. The distinction matters when you are describing what you hold, and it is worth getting right in an application.
Combating Financial Crime works differently. It stays a Level 3 Award in its own right, and rather than pairing into a certificate it counts as a technical unit of the Investment Operations Certificate and as a unit of the Level 6 Diploma in Investment Compliance, where UK Regulation & Professional Integrity is another. So one sitting of Combating Financial Crime can serve a qualification you have not decided to start yet, which makes it a low-risk first paper.
Which one should you sit first?
Match the paper to the desk. If your work is exposure, limits, capital or loss events, Risk in Financial Services is the honest fit. If it is monitoring, advisory compliance or a regulator relationship across more than one jurisdiction, Global Financial Compliance is. If it is onboarding, screening, due diligence or suspicious activity reporting, Combating Financial Crime is, and it is also the cheapest way to find out whether this side of the industry suits you before committing 100 hours to a longer paper.
If you are choosing on time rather than on role, Combating Financial Crime is 50 questions in an hour against 100 questions in two hours for the other two, and CISI suggests roughly half the study hours. It is the natural first paper for someone testing the water.
How long each paper takes
CISI suggests around 100 hours for Risk in Financial Services and for Global Financial Compliance, and roughly half that for Combating Financial Crime. The 100-question papers are two hours in the exam room; Combating Financial Crime is one.
Those hours are a guide for someone meeting the material for the first time. If you already work in the function the paper describes, the honest saving comes on the chapters you live in and nowhere else: the frameworks, the named legislation and the definitions still have to be learned to exam precision, and that is the part experience does not shortcut.
What this route does not cover
CISI also runs a Level 5 Climate Risk Certificate and the Level 6 Diploma in Investment Compliance on this side of the catalogue. Passkey does not support either, and neither is a sensible starting point: both assume the Level 3 material below them. If your firm has asked for one of those specifically, the three papers above are still the groundwork.
Where Passkey fits
Passkey covers all three Level 3 papers, and it also covers UK Financial Regulation, the regulatory exam most candidates pair with them. Each paper has a practice bank, timed mocks weighted to its real element split, study notes and flashcards, and one payment of £59 covers every supported exam for 90 days rather than one paper at a time.
Passkey is an independent study tool. It is not affiliated with, endorsed by, or accredited by the Chartered Institute for Securities & Investment, and it does not replace the official workbook. The qualification comes from CISI.
Go deeper on each paper
- How to pass Risk in Financial Services, and the free 100-question mock.
- How to pass Global Financial Compliance, and the free 100-question mock.
- How to pass Combating Financial Crime, and the free 50-question mock.
- Placement, layering and integration explained, the topic all three papers test.
- For the method that works across all of them, see the complete guide to passing your CISI exams.
Frequently asked questions
What CISI qualifications are there for compliance and risk?
At Level 3 the main three are Risk in Financial Services, Global Financial Compliance and Combating Financial Crime, each a standalone Level 3 Award. CISI also runs a Level 5 Climate Risk Certificate and the Level 6 Diploma in Investment Compliance, both of which assume the Level 3 material below them.
What is the difference between the Award and the Certificate?
Sitting one paper earns the standalone Level 3 Award in that subject. Adding a CISI regulatory exam to Risk in Financial Services or Global Financial Compliance completes the corresponding Level 3 Certificate, which is the version most employers recognise.
Which compliance paper should I sit first?
Match it to your role: Risk in Financial Services for exposure, limits and loss events; Global Financial Compliance for monitoring and advisory compliance across jurisdictions; Combating Financial Crime for onboarding, screening and due diligence. Combating Financial Crime is also the shortest at 50 questions in 60 minutes, which makes it the easiest first paper.
Does Combating Financial Crime count towards anything else?
Yes. As well as being a Level 3 Award in its own right it counts as a technical unit of the Investment Operations Certificate and as a unit of the Level 6 Diploma in Investment Compliance, where UK Regulation & Professional Integrity is another. One sitting can therefore serve a qualification you have not started yet.
Find your weak spots before exam day.
Start free with chapter 1 of every supported exam, take the free Introduction diagnostic for a short foundation-level snapshot, then unlock everything for one payment of £59.