As long as the distribution can be characterized fully by giving only its mean and standard deviation, then the standard deviation is a perfectly proper measure of risk. A normal distribution would obviously qualify, as would a uniform distribution.
This is an example where the CFA Institute curriculum has tried to simplify things, and in doing so has ended up making a mistake.