Key Takeaways

  • Risk avoidance eliminates the risk entirely by not engaging in the activity
  • Risk reduction (loss control) minimizes the probability or severity of loss
  • Risk retention involves accepting the financial consequence through deductibles or self-insurance
  • Risk transfer shifts risk to another party through insurance or contracts
  • Use the frequency-severity matrix to select the appropriate risk management technique
Last updated: January 2026

Analysis of Risk Exposures

Understanding how to analyze and manage risk exposures is fundamental to insurance planning. The CFP exam tests your ability to identify appropriate risk management strategies based on the characteristics of each risk.

The Four Risk Management Techniques

Every risk can be addressed using one or more of four fundamental techniques. The goal is to select the approach that provides the best protection at a reasonable cost.

1. Risk Avoidance

Risk avoidance eliminates a risk entirely by not engaging in the activity that creates the exposure.

How it works: You simply don't participate in activities that could result in loss. This is the most complete form of risk management because it removes the possibility of loss entirely.

Examples:

  • Not owning a motorcycle to avoid motorcycle accident injuries
  • Not investing in stocks to avoid market losses
  • Not owning a swimming pool to avoid drowning liability
  • Choosing not to skydive to avoid parachute-related injuries

Limitations: While avoidance eliminates risk, it also eliminates any potential benefits from the activity. You can't profit from stock investments if you never invest. Some risks cannot be avoided—you can't avoid the risk of illness simply by choosing not to get sick.

When to use: Avoidance is appropriate for risks that are high frequency AND high severity—where losses happen often and are catastrophic when they occur. If an activity consistently produces devastating losses, don't engage in it.


2. Risk Reduction (Loss Control)

Risk reduction (also called loss control) involves taking steps to decrease either the probability of a loss occurring or the magnitude of the loss if it does occur.

Risk reduction operates through two mechanisms:

Loss Prevention – Reducing the probability that a loss will occur

  • Installing smoke detectors and fire extinguishers
  • Maintaining a vehicle regularly to prevent breakdowns
  • Exercising and eating healthy to reduce illness risk
  • Installing security systems to deter theft

Loss Reduction – Minimizing the severity of loss when it does occur

  • Wearing seatbelts to reduce injury severity in accidents
  • Installing sprinkler systems to limit fire damage
  • Keeping fire extinguishers accessible
  • Building with fire-resistant materials

When to use: Risk reduction is appropriate for risks that are high frequency AND low severity—minor losses that happen regularly. While you could purchase insurance for every small risk, the cumulative premium cost would exceed the losses themselves. Instead, focus on preventing or minimizing these frequent small losses.


3. Risk Retention

Risk retention means accepting the financial responsibility for potential losses yourself rather than transferring them to an insurer.

Retention can be active (a conscious decision to self-insure) or passive (unknowingly retaining risk due to lack of awareness or unavailable coverage).

Common retention methods:

MethodDescriptionExample
DeductiblesFirst dollars of loss paid by insured$1,000 auto deductible
Self-insuranceSetting aside funds for potential lossesEmergency fund for medical costs
Captive insuranceCreating own insurance companyLarge corporation insuring subsidiaries
Co-paymentsSharing costs with insurer20% coinsurance on health claims

Key considerations for retention:

  • Client must have sufficient liquid assets or emergency funds to cover retained losses
  • Deductibles should be set at amounts the client can afford to pay out-of-pocket
  • Higher deductibles reduce premiums but increase out-of-pocket exposure

When to use: Retention is appropriate for risks that are low frequency AND low severity—small losses that rarely occur. Examples include minor car door dings, small appliance repairs, or routine illnesses. The administrative cost and premiums to insure these risks would exceed the expected losses.


4. Risk Transfer

Risk transfer shifts the financial burden of potential losses to another party, typically through insurance or contractual agreements.

Insurance transfer is the most common method:

  • You pay premiums to an insurance company
  • In exchange, the insurer agrees to pay for covered losses
  • The insurer can predict aggregate losses using the law of large numbers
  • This works for pure risks (only possibility of loss, not gain)

Non-insurance transfer methods:

  • Hold harmless agreements – Contractual provisions shifting liability
  • Warranties – Extended warranties transfer repair risk to the seller
  • Hedging – Financial instruments that offset potential losses
  • Incorporation – Business structure limits personal liability

When to use: Transfer is appropriate for risks that are low frequency AND high severity—rare events that cause catastrophic losses. Examples include house fires, major auto accidents, premature death, and long-term disability. These losses happen infrequently but are devastating when they occur—exactly what insurance is designed to handle.


The Frequency-Severity Decision Matrix

The key to selecting the appropriate risk management technique is evaluating each risk based on two factors:

  1. Frequency – How often does this type of loss occur?
  2. Severity – How large is the financial impact when it occurs?
High SeverityLow Severity
High FrequencyAVOIDANCE – Eliminate the activityREDUCTION/RETENTION – Prevent losses; retain what remains
Low FrequencyTRANSFER (Insurance) – Low premiums for catastrophic coverageRETENTION – Self-insure minor, rare losses

Applying the Matrix

High Frequency + High Severity = AVOID If something causes major losses repeatedly, don't do it. Example: A client considering opening a fireworks store in a wooden building with no sprinklers—the combination of frequent fire risk and catastrophic loss potential means this activity should be avoided.

High Frequency + Low Severity = REDUCE/RETAIN For minor losses that happen regularly, focus on prevention and accept what you can't prevent. Example: Minor employee injuries in a warehouse—implement safety training (reduction) and maintain a petty cash fund for small claims (retention).

Low Frequency + High Severity = TRANSFER Rare but devastating events are ideal for insurance. Example: House fire, premature death, major liability lawsuit—low probability keeps premiums affordable, while the coverage protects against financial ruin.

Low Frequency + Low Severity = RETAIN For rare, minor losses, just accept them. Example: Occasional parking lot door dings, broken household items—the cost of insuring these would exceed the losses over time.


Practical Application: Choosing Deductibles

Deductibles represent a form of risk retention. The proper deductible amount depends on:

  1. Client's emergency fund – Can they pay the deductible if a loss occurs?
  2. Risk tolerance – Are they comfortable with higher out-of-pocket costs for lower premiums?
  3. Claims history – Frequent claims may make higher deductibles inappropriate
  4. Premium savings – Higher deductibles should produce meaningful premium reductions

Exam Tip: The CFP exam often presents scenarios asking which risk management technique is appropriate. Always consider:

  • What is the frequency of this type of loss?
  • What is the potential severity?
  • Does the client have resources to retain the risk?
  • Is insurance available and affordable?

Combining Techniques

In practice, most risks are managed using a combination of techniques:

Example: Automobile Risk

  • Avoidance – Not driving drunk or distracted
  • Reduction – Maintaining the vehicle, wearing seatbelts, defensive driving
  • Retention – Paying a $1,000 deductible on collision coverage
  • Transfer – Purchasing liability, collision, and comprehensive insurance

Example: Health Risk

  • Avoidance – Not smoking, avoiding dangerous activities
  • Reduction – Exercise, healthy diet, regular checkups
  • Retention – Paying copays, coinsurance, and deductibles
  • Transfer – Health insurance for major medical expenses

Key Terms for the Exam

TermDefinition
Pure RiskRisk with only possibility of loss or no loss (not gain)—insurable
Speculative RiskRisk with possibility of loss, gain, or no change—not insurable
DeductibleAmount of loss paid by insured before insurance pays
CoinsurancePercentage of loss shared between insured and insurer
Self-insuranceDeliberately retaining risk by setting aside funds for losses
Law of Large NumbersPrinciple allowing insurers to predict aggregate losses accurately
Test Your Knowledge

Joe's daughter is 16 years old and he recently bought her a 1970 VW Bug for $1,000. Which risk management strategy should Joe use to manage the risk of property loss due to a collision?

A
B
C
D
Test Your Knowledge

A client asks how to handle the risk of their house being destroyed by fire. According to the frequency-severity matrix, which technique is most appropriate?

A
B
C
D
Test Your Knowledge

Which risk management technique is most appropriate for a warehouse experiencing frequent minor employee injuries costing $500-$1,000 each?

A
B
C
D