2.2 The Risk Management Process

The Risk Management Process

Quick Answer: Risk management is a six-step process: identify loss exposures, analyze frequency and severity, examine techniques, select, implement, and monitor. Risk control changes how often or how large losses are. Risk financing pays for losses that still occur. Insurance is one financing tool, not a substitute for the whole process.

A new CSR often thinks risk management means buy a policy. AINS 101 Assignment 1 pushes the opposite idea: insurance is one technique inside a process that starts with identification. Families and small businesses that skip the process either buy the wrong policy, retain a loss they cannot stand, or spend premium on an exposure they could have avoided. When an underwriter asks what the applicant has already done about a hazard, that question is this section in operational form.

The six steps

1. Identify loss exposures. Walk the operation. For a family: house, cars, personal liability, earned income, health. For a landscaping firm: trucks, mowers, customer property, employees, a winter cash crunch if snow equipment is lost. Identification tools include checklists, financial statements, flowcharts of how work moves, loss histories, and physical inspections. You cannot analyze what you have not named. A producer who only copies last year's declarations page has not identified anything new—such as a food truck added in March.

2. Analyze loss exposures. Two measures: frequency (how often) and severity (how large). A chipped windshield is high frequency, low severity. A total fire at the only warehouse is low frequency, high severity. AINS items often pair those labels with a technique: high-frequency, low-severity losses are candidates for prevention and retention (deductibles); low-frequency, high-severity losses are candidates for insurance or avoidance. Analysis also asks whether losses are correlated. Ten vans in one garage share a fire; ten vans parked overnight at ten homes do not.

3. Examine the feasibility of risk management techniques. List what could actually be done: stop the activity, change how it is done, keep the financial burden, or shift it. Feasibility includes cost, legality, customer impact, and whether the technique merely moves the exposure. A restaurant cannot avoid serving food and remain a restaurant. A hold-harmless clause is useless if the other party has no assets.

4. Select the appropriate combination of techniques. Mix control and financing. A contractor can require backup alarms (control), keep a $2,500 deductible (retention), and buy business auto liability (insurance). Selection should match the firm's risk appetite and cash position, not a producer's favorite product. Selecting only insurance for every ding is usually a poor mix; selecting only hope is unplanned retention.

5. Implement. Assign owners, budget, deadlines, and communication. A sprinkler that is never inspected is not an implemented control. A policy that sits unsigned is not implemented financing. Implementation includes telling drivers about a phone ban and telling the CSR which certificates of insurance must be collected from subcontractors.

6. Monitor results and revise. Loss runs, near misses, new locations, new statutes, and a key employee who resigns all feed the loop. Risk management is not a one-time application. Monitoring is why an annual insurance review is not the same as copying last year's binder.

The discipline has evolved from buy insurance and file claims to a broader enterprise risk management (ERM) view that still uses these steps but looks across operational, financial, strategic, and hazard risks together. For AINS 101, you will be tested on the hazard-risk version used in P&C operations, with awareness that modern firms do not treat insurance purchasing as the entire discipline. A sample-course topic you should be ready to explain: ERM did not retire the six steps; it widened the list of exposures that go through them.

Risk control versus risk financing

Risk control techniques change the frequency or severity of losses (or make them more predictable). Risk financing techniques pay for losses that occur. Mixing the two is the default, not the exception.

Avoidance is the only control that can reduce frequency to zero for that exposure—and it can create a new exposure (lost revenue, a customer who goes elsewhere and sues later). Prevention and reduction are often cheaper than full insurance and are what loss-control representatives actually recommend after an inspection.

Retention can be planned (a chosen deductible, a funded reserve) or unplanned (no insurance and no savings). It can be funded or unfunded. Insurance is a funded risk-transfer technique, not a control technique, even when the insurer also offers inspections. Noninsurance transfer can fail if the other party is broke or the clause is unenforceable—another reason to monitor.

When insurance is the right technique—and when it is not

Insurance fits low-frequency, high-severity pure risks that meet the insurable-risk tests in the next section: a house fire, an auto liability lawsuit, a customer's injured guest. It is a poor first choice for high-frequency, low-severity dings that a deductible and better procedures would handle more cheaply. It is the wrong tool for speculative bets (a new product's success) and for losses the applicant can cheaply avoid.

Family in a floodplain

Avoidance means moving. Loss reduction means elevating the structure or installing flood vents. Insurance means a flood policy—often through the National Flood Insurance Program (NFIP) or a private flood market—because standard homeowners forms exclude flood. Retention means hoping the creek never rises, which is unplanned retention if the family cannot fund a rebuild. A producer who only quotes a homeowners policy has not completed the process; flood is a different peril and usually a different policy.

Three-van catering company

Night highway runs produce occasional serious collisions (low frequency, high severity): buy liability and physical damage insurance, plus loss prevention (hours discipline, phone bans). Chipped windshields (high frequency, low severity): a higher glass deductible or outright retention. Using one kitchen for all prep is a concentration; separation (a second licensed kitchen) is control, not a policy form. Duplication is the spare van that keeps Friday weddings on the calendar after a breakdown. Diversification is adding weekday corporate lunches so one cancelled Saturday does not erase the month.

AINS items will ask you to name the step and the technique, not to invent a premium. If the fact pattern says the owner is listing possible ways to handle the fryer-fire exposure, that is step 3 (examine). If the owner installed a hood suppression system last month, that is implemented loss reduction. If the owner raised the property deductible to keep cash and still bought liability limits the landlord required, that is selected retention plus insurance—two financing techniques, not a control failure.