How to Mitigate Risk for Your Business

How to Mitigate Risk for Your Business

How to Mitigate Risk for Your Business

As a business owner, one of the key ingredients to growing your business is to avoid risk. This may seem counterintuitive to what most of us imagine a growing thriving business should do. Starting and growing a business is about taking risks and finding opportunity. But the risks we take as business owners should be calculated with expectations of return.

You can create structures in your business to protect you against threats to your operation. Establishing risk protection will give you the confidence to expand and find opportunities to grow.

When it comes to risk, most of us think about insurance. After all, it’s a method of transferring risk to someone else. When bad things happen, it falls on the shoulders of the insurance company.

But insurance is not the only way to manage risk in your business. In fact, there are other strategies you can employ that will ultimately save you money and provide extra layers of protection.

Here’s a simple way to think about the risks to your business:

A risk is an event reducing the capacity of your organization to achieve its business goals.

You cannot mitigate disasters such as flood, wildfire, hurricane, theft, or market conditions. However, you do have the power to respond and even recover when events do impact your business.

Wind Damage to a Commercial Building


A Business Model for Analyzing Risk

Here is a model for thinking about what needs protecting in your business, and several tools you can implement to mitigate risks.

The following questions can help you survey your business to discover areas vulnerable to risk.

What Do You Have That Needs Protecting?

If damaged, destroyed, or disabled, what would impact your bottom line? This could be physical structures and equipment. It could be people within your organization. It could be suppliers or even your reputation.

What Might Disrupt Your Business and How?

This could be traditional hazards like weather or theft, and other disruptors besides physical threats. What if another business steals your employees? What if key people in the business die or leave? Could economic conditions create disruption and damage your ability to generate profit?

What happens to your business if your business gets disrupted?

Think through the answers you’ve given to the first two questions and begin to follow out what aspects of your business are impacted. Are there steps you can take to hedge against disaster? Even if you have insurance for many of the basic hazards, how will you operate during that period of restoration?


Methods of Attacking Risk

Now that you’ve made a list of potential threats to your business. How do you respond? Traditional risk managers like to think about responding to risk in 5 different ways.

1. Accept the Risk

This may not mitigate any risk or even reduce its impact on your business, but it is still a strategy. We all accept a certain amount of risk in our everyday lives. Every time we leave our house in a motor vehicle we are accepting a wide range of risk. The same is true for our business.

You use this strategy when the cost of other options such as avoiding or controlling outweigh the cost of the risk itself.

This strategy is all about probability. It doesn’t make sense to spend time and money on risk protection for those events that have a low probability of impacting your business.

2. Avoid the Risk

Avoidance is the opposite of accepting risk. You don’t go near it. You see the possibility and run the other direction.  Or you do everything in your power to stomp out the risk from threatening your business. Surprisingly, this can be the most expensive course of action you can take.

For example, you implement safety protocols in your business to prevent the destruction of property or harm to employees. The costs here are directly related to the degree you want to eliminate or avoid the risk.

3. Control the Risk

Controlling risk is the most common strategy used by businesses. For example, you may know that computer hardware will fail at some point. It could be the loss of data or the destruction of a hard drive. You accept this risk, but you control it by creating a backup strategy or even redundant systems in the business.

If your business is dependent upon transportation, you might have backup vehicles or an agreement in place if your fleet goes down.

You are implementing actions inside your business to minimize the impact a risk might have on your business objectives.

4. Transfer the Risk

Transferring risk is usually where insurance is used. You hand off the risk to a willing third party. Insurance is not the only method you can use to transfer risk. You might outsource customer service or payroll to another party.

In this case, you send your risk elsewhere to be handled by others who are experts in specific areas. Again, cost must be considered. Is the trade-off in cost less than dealing with the risk inside your business? If so, find a way to transfer as much risk as possible.

5. Monitor the Risk

Unfortunately, risk management is not a one-time activity. The environment around your business continually changes. Time must be spent to periodically review all the potential threats to your goals and how you are managing those threats.


Practical Tools To Mitigate Risks

Let’s look at several examples where you can implement these strategies.

Water Protection

This is a hidden risk that could cause a massive amount of damage to your business at a steep cost. Even with insurance in place, the restoration time could eat into your business profits. Simple risk mitigation strategies can minimize or eliminate this risk.

The Wall Street Journal recently highlighted the growing trend of ever-increasing water claims:

“Insurance claims tied to water damage from indoor leaks are steadily on the rise, even as many other common claim types — including fire — have declined.”

As buildings age, the risk of water damages increases. Anything older than 20 years is at a higher risk.

Simple risk mitigation strategies can be put in place, such as:

  • Monitoring and repairing small leaks promptly
  • Training employees to notify maintenance whenever potential water damage occurs
  • Adherence to regular maintenance schedules
  • Regular inspection of liquid storage tanks
  • Knowledge of shut-off valves for all systems
  • Testing of shut-off valves
  • Critical equipment and materials are protected against potential water damage events
  • Semi-annual roof inspections
  • Having a designated program administrator
  • Creating restoration procedures
  • Installing leak detection systems

Mitigate risk with water protection


Wind Mitigation

Protection against wind is not only important in coastal states, but any part of the country where high winds are common whether it be through hurricanes, tornadoes, or straight-line winds.

Besides the protection your business will receive by implementing these strategies, many insurance providers will offer mitigation credits to your premiums.

Many states will have a list of recommendations to protect your property against severe wind damage.

For example, to qualify for mitigation credits in Florida, an inspector will look at the following characteristics of your building:

  • Roof Shape
  • Roof Bracing of Gable End
  • Roof Deck Attachment
  • Roof Covering
  • Roof-to-Wall Connections
  • Secondary Water Resistance
  • Doors
  • Protection of Openings (windows and other openings)

Simple measures such as securing roofs with hurricane clips and wraps are effective against major wind damage. Also protecting windows, doors, and openings will minimize wind risk. Water barriers are also important because the wind is usually accompanied by large amounts of rain.


Business Continuity

A large percentage of small to midsize businesses will never open their doors again after a disaster. Most businesses do not have a written plan to continue operations in the face of serious risk.

This is a simple step to help you begin managing risks. Here are basic tips on creating a business continuity plan.

  1. Write it down. Whatever you develop should be written and kept where it can be accessed by critical employees of the business. Don’t rely on collective wisdom and knowledge during times of stress. The best time to plan is when things are calm and controlled.
  2. Create a Disaster Team. Identify people within your organization and task them with implementing the plan with specifics actions and outcomes.
  3. Identify Critical Business Objectives. What parts of your business is critical to survival? These need to be prioritized in the event of a disaster.
  4. Review Technology. Technology can allow you to continue operations even when your physical structures are damaged. Know how they work and how they can be used if something occurs.
  5. Create Redundancies. Find ways to create backups. Have some duplicate systems to hedge against one failing.
  6. List Emergency Contacts. This one is simple but often overlooked in most plans.
  7. Run mock tests of your plan. This will help you find gaps, iron out inefficiencies, and give you confidence that you can withstand potential disasters.


Safety Programs

Safety programs are mandated by OSHA in many businesses, but sometimes they are not followed or implemented with much care. Having simple safety protocols can reduce the number of risks you might experience in your business.

This will vary from business to business. Even office and clerical type businesses can be filled with hazards.

Identify potential hazards in your business. Minimize any hazards you find. Communicate expectations with employees around safety.

Using an outside risk manager can be very helpful in designing safety programs. Most risk managers are familiar with businesses like yours and can design programs without being burdensome.


The Bottom Line

Risk is something we experience every day. It can be disastrous without proper planning, and insurance alone sometimes isn’t enough. The good news is that we all have more control over risk than many of us realize. Simple steps and a thoughtful strategy can help mitigate risk that could potentially devastate your business.