UPI Study › Courses › Business Essentials › Free lessons › Lesson 19.1 Free with a free account
Risk Classification: Insurable versus Uninsurable Business Risks
Business Essentials · Chapter 19: Risk Management and InsuranceSection 19.1 · lesson 84 of 10514 min · free with a free account
Free preview
Create a free account to keep watching
It takes a minute and costs nothing. Your free account unlocks all of Chapter 1 and 3 more lessons of Business Essentials.
Lesson complete
Earn the 3 college credits for Business Essentials
Enrolling adds a quiz after each lesson, the graded work and the official transcript. Recommended for credit by NCCRS.
Next lesson: Managing Business Risk Through Insurance Coverage →← E-Business Dynamics and Ethical Challenges in Technology ManagementNext lesson: Managing Business Risk Through Insurance Coverage →
In this lesson
Which risks a business carries, and which of them insurance can reach.
- Distinguish pure from speculative risk
- Describe the 8 categories of business risk
- Apply the 4 treatment responses and 5 insurability criteria
- Build a first-pass risk assessment
Free study notes
Get this lesson's notes by email
The key points and 4 practice questions with answers, in your inbox. One email, free.
One email. Unsubscribe in one click.
Transcript
Everything said in the video, section by section (1,972 words). Read along, or search it.
Risk Management and Insurance
Risk Classification: Insurable versus Uninsurable Business Risks
Every business carries risk. Some it chose to carry, and some it carries without knowing. This section is educational. It isn't financial, legal, tax, accounting, or insurance advice. A business assessing its own risk should work with a qualified broker, attorney, or accountant. We'll separate pure risk from speculative risk, a distinction that decides what can be insured. We'll sort business risk into eight categories, and walk through the risk management process. We'll cover the four treatment responses, and the five criteria that make a risk insurable. Then moral hazard, adverse selection, and a worked assessment for a small catering firm. And we'll meet a furniture maker whose biggest risk was the one he'd never listed.
Defining Risk
Risk, Uncertainty, and What Can Be Insured
Risk is uncertainty about an outcome that matters to a business. But professionals draw a sharper line between risk and uncertainty. Strictly, risk means the possible outcomes and their likelihood can be estimated, even roughly. Years of claims history tell a business roughly how often a delivery van has a minor collision. Uncertainty means they can't be estimated at all, like a novel event with no precedent. Chapter fourteen drew the same line for supply chain disruptions. We'll use risk in its broad, everyday sense, and flag the distinction where it matters. Pure risk offers only loss or no loss, never gain. There's no upside version of a fire. Speculative risk offers gain as well as loss. A new product might earn a profit, or lose money. Here's the crucial consequence. Only pure risk is generally insurable. Insure a new product against failing to sell, and the business is compensated either way. It would have little reason to work hard at making the product succeed. Insurance protects against loss without dulling the incentive to gain. So it's built around pure risk.
8 Categories
Where Business Risk Comes From
Business risk is commonly sorted into eight categories, each typically owned by a different function. Property risk is loss to physical assets, like buildings, equipment, or inventory. Operations or facilities own it. Liability risk is legal responsibility for injury or damage to a third party. Legal counsel and risk management usually share that one. Personnel risk covers workplace injury, losing a key employee, and misconduct. That's human resources. Operational risk is the business's own processes, systems, or people failing to perform as intended. Financial risk concerns access to capital, and exposure to changes in prices or interest rates. Strategic risk is the chosen strategy failing its objectives. Senior leadership owns it. Compliance risk is failing a legal or regulatory obligation, owned by legal and compliance. And reputational risk is damage to how the business is perceived. Leadership and communications own it. The categories work best as a checklist. They send you to look in places you'd otherwise skip.
The Process
Identify, Assess, Treat, Monitor
Risk management runs in four stages: identify, assess, treat, and monitor. Identification means finding and naming the risks. It's where most of the value lies. A risk never identified can't be assessed, treated, or monitored. It's simply retained by default. It's also the stage most often done informally, if at all. In a small business, risk often gets considered only after something has gone wrong. Assessment estimates how likely each risk is, and how severe it would be. Treatment decides the response. Monitoring watches for changing risks, failing treatments, and new risks, because the risk profile changes with the business. Process review asks what could go wrong at each step of each significant activity. Incident and claims history studies past losses and near misses, because patterns tend to repeat. Checklists from industry or an insurance professional prompt categories you might not think of. Scenario thinking works backward from a described adverse event, to what it would mean. And asking the people who do the work surfaces problems that never reach a manager's desk. It's often the most revealing method, precisely because it's the most commonly skipped.
Figure 19.1.1
Likelihood, Consequence, and the Register
Once identified, each risk is assessed on two dimensions. Likelihood is how probable it is. Consequence is how severe the result would be. Plot risks on those two axes, and you can see which ones most need attention. This extract shows two of a described business's risks. In the lower left sits a water-damage risk. It's unlikely, and minor. In the upper right sits the loss of a key supplier. It's likely, and severe. Both might sit on the same list. But the likely, severe one demands far more urgent treatment. Position on the grid, not mere presence on a list, should decide the response. A risk register is a structured record of identified risks, their assessment, and their treatment. Its value depends entirely on use. A register nobody reviews is a document, not a management tool. What makes it work is revisiting it: updating assessments, and adding newly identified risks.
Treatment
Avoid, Reduce, Transfer, Retain
With a risk identified and assessed, a business chooses among four treatment responses, alone or combined. To avoid a risk is to skip the activity that creates it, like declining a market with an unacceptable exposure. To reduce a risk is to lower its likelihood, or its consequence. Fire-suppression equipment doesn't eliminate the risk of fire. It reduces the damage if one occurs. To transfer a risk is to shift its financial consequence to another party. Most often that's insurance, the subject of the next section. It can also be a contract term, shifting responsibility to a supplier or a customer. To retain a risk is to accept it knowingly, usually because the alternatives cost more. Now an observation worth stating plainly. Every business retains far more risk than it realizes. Not because it chooses large exposures. Because unidentified risk is retained by default. The business bears the full consequence of such a risk, without ever having decided to.
Insurability
5 Criteria an Insurer Applies
Not every pure risk can be insured. Insurers apply five criteria, at least in substance. First, there must be a large number of similar exposure units. No single loss can be predicted. But across a big pool, the total pattern becomes predictable. That's the law of large numbers. An insurer can't know which policyholder will have a fire. But with enough policyholders, it can estimate fairly reliably how many fires there'll be in total. That's what lets it set a premium with confidence. Second, the loss must be definite in time and cause, and measurable in amount. Otherwise claims can't be administered fairly or consistently. Third, the loss must be accidental, and outside the insured's control. Otherwise the incentive problem is obvious. Fourth, the loss must not be catastrophic to the insurer. An event hitting huge numbers of policyholders at once defeats the pooling. Specialized markets handle some of these. And fifth, the premium must be economically feasible. A technically insurable risk with a prohibitive premium won't, in practice, be insured.
Table 19.1.1
4 Risks Through the Criteria
This table runs four risks through the criteria. Fire damage to a leased workshop meets every criterion. It's insurable. Many similar workshops exist, the damage can be measured, and fires don't strike everyone at once. A new product line that fails to sell fails several criteria. Each launch is unique, failure isn't objectively defined, and the outcome rests on the business's choices. It's speculative, and not insurable. Regional flooding meets most criteria, but strains the catastrophe test, since many policyholders are hit together. So it's only partially insurable, often through specialized flood coverage, with limits. Lost reputation is highly specific, hard to measure, and often tied to the business's own conduct. It's largely uninsurable, though certain narrow response costs may be covered as a distinct product. Market and demand risk fails too. It comes from ordinary competition, not a discrete accident. Strategic risk fails for similar reasons, and losses from deliberate choices fail the accidental test outright. Failing even one criterion usually means uninsurable, or insurable only on narrow terms.
Insurer Conditions
Moral Hazard, Adverse Selection, Other Tools
Two related problems explain why insurers attach conditions to coverage. Moral hazard is the tendency to take less care once you're protected from a loss. In extreme cases, a protected party may even have some incentive to cause the loss. Fully insured against theft, with no deductible, a business might grow less vigilant. No dishonesty required. Adverse selection is the tendency of the people likeliest to suffer a loss to be keenest to insure. Left unaddressed, it skews the pool toward higher risks, and undermines the pooling itself. Insurers respond with underwriting, evaluating an applicant's risk before setting terms. They use deductibles, which the policyholder bears first, keeping an incentive to avoid loss. And they set conditions. Not every insurable risk is best insured. A contract can make a contractor bear its own errors. Operational control, through training, maintenance, and quality procedures, lowers likelihood or severity directly. And a capital reserve sets funds aside for a risk the business chooses to retain. That can beat a premium when a risk is unlikely, not severe, or poorly suited to standard products.
Worked Example
Marigold Catering: First-Pass Identification
Here's a worked example. Marigold Catering is a fictional firm with twelve employees. It caters private events from a single rented kitchen, with its own fleet of three vans. Working through the eight categories gives a first-pass identification. Property: damaged kitchen equipment, ingredients spoiled by a refrigeration failure, and damaged vans. Liability: a guest falling ill after eating its food, or a van causing an accident. Personnel: a kitchen injury, or losing the head chef, around whom much of the menu and client base is built. Operational: failing to deliver on time for a scheduled event. For an events business, that can't be corrected afterward, the way a late retail delivery might be. Financial: a large client failing to pay, after the event has been delivered. Strategic: an expansion into corporate catering, a new market, failing to justify the investment. Compliance: failing a food-safety inspection, or violating a licensing requirement. And reputational: one poorly run, high-profile event, damaging its standing with the planners who refer its business.
From List to Register
What Marigold Had Been Carrying
This first pass already shows risk retained by default. Marigold had insurance on its kitchen equipment and vans, covering two property risks. But it had never considered its dependence on one chef, or its exposure to a slow-paying client. It had been carrying both, without ever deciding to. Assessing each risk, then applying the four treatments, turns the list into a working register. Refrigeration failure might be reduced, with a maintenance contract and a backup unit. Guest illness is a strong candidate for transfer, through liability insurance, covered in the next section. The key chef risk might be reduced by cross-training a second cook, and considered for coverage. The slow-paying client risk might be reduced with deposit requirements in its contracts. The corporate expansion is speculative, so it's retained knowingly, as a risk insurance doesn't reach. None of this is advice for a real business. But the method is the same for anyone who applies it.
Case Vignette
The Risk Nobody Listed
Here's a composite case, built for instruction. Anders owns a small furniture workshop. For a decade, he's bought hardwood from one regional supplier. A new insurance broker reviews the business. Anders readily lists his property risks, and each is insured. He has never written down his dependence on that one supplier. The broker asks what would happen if the supplier stopped operating. Financial trouble, a disaster at its premises, or a decision to drop businesses of his size. Anders has no answer. He's never identified an alternative source, or estimated an interruption's length. Nor has he considered what lost production would cost while he searched for another supplier. The trade-off: the cost of qualifying a second supplier, against an unmanaged exposure that could halt the workshop. And a second supplier may not match the first on price or quality, at least not at first. His reasoning is that this risk was never treated, because it was never identified. Identifying it comes first. Then, with advice, he can reduce it, transfer part by contract, or retain it knowingly.
About Business Essentials at UPI Study
Business Essentials (Business 100) is a self-paced online course of 105 video lessons in 24 chapters, from the business environment, economics and global markets to ownership, management, leadership, operations, people, marketing, accounting, finance and banking. It carries a NCCRS credit recommendation for 3 semester credits.
Every lesson transcript is free on pages like this one, and the videos are free with a free UPI Study account. Enrolling adds a practice quiz after each lesson, the graded work and final exam that earn the credit, lifetime access, and an official transcript on completion. UPI Study has helped over 130,000 students with college credits. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Enroll now → Course details Download the syllabus All Business courses Every course with PRO →
Why take it here
Why students take Business Essentials with UPI Study
Where the credit goes
Universities that work with NCCRS
Business Essentials carries a NCCRS credit recommendation. These universities work with NCCRS; some are UPI Study's signed partners. ACE and NCCRS have over 2,100 cooperating colleges that will consider accepting credits; the final decision is with the universities.
Thomas Edison State UniversitySigned partner
University of the PeopleSigned partner
Charter Oak State CollegeSigned partner
Strayer UniversitySigned partner
Columbia Southern UniversitySigned partner
Indiana TechSigned partner
Penn StateWorks with NCCRS
Southern New Hampshire UniversityWorks with NCCRS
SUNYWorks with NCCRS
+many more cooperating universitiesFind my college →Find my college → Not listed? Ask Athena in the corner of this page, or book a 15-minute call.
FAQ
Questions students ask us
About Risk Classification: Insurable versus Uninsurable Business Risks
What is the difference between pure risk and speculative risk?
What are the four ways to treat a business risk?
What makes a risk insurable?
What is the difference between moral hazard and adverse selection?
About the Business Essentials course
How many college credits is Business Essentials?
How much does Business Essentials cost and what is included?
Which universities accept UPI Study credits?
How long does Business Essentials take?
How are the exams done?
How do my credits reach my college?
Ready for the full course? Earn 3 credits in Business Essentials.
105 video lessons, a quiz after each one, and the graded work that earns the credit. Recommended for credit by NCCRS.
3 credits · NCCRSEnroll →