Detailed
ANA:1:11/13 - 1 - © 2013 Certified Risk Managers International. All Rights Reserved.
Introduction to Analysis of Risk
Learning Objectives
1. Discuss the definitions of risk and the general classes of risk. (p. 2)
2. Discuss the definition of risk management and the five steps of the risk management process. (p. 6)
3. Discuss the components of the total cost of risk and its use as a key risk management tool. (p. 15)
4. Discuss the uses of risk analysis and the necessary tools to perform a risk analysis. (p. 23)
ANA:1:11/13 - 2 - © 2013 Certified Risk Managers International. All Rights Reserved.
Learning Objective #1: Discuss the definitions of risk and the general classes of risk.
I. What is Risk?
A. Definitions of risk
1. “Risk” is a term subject to various interpretations in risk management. The interpretations are usually dependent upon the perspective of the user and the purpose for which the term is applied.
2. Risk may take the form of
a. A probability
b. A degree of uncertainty
c. Varying outcomes
d. A variance from a forecast or prediction
3. Four broad definitions of “risk” used in risk management
a. Chance or probability of loss
b. Uncertainty concerning loss
c. Possibility of a variation of outcomes from a given set of circumstances
ANA:1:11/13 - 3 - © 2013 Certified Risk Managers International. All Rights Reserved.
d. Difference between expected losses and actual losses
4. For purposes of the CRM program, the most useful definition of risk is:
“Uncertainty that may be either positive or negative arising from a given set of circumstances.”
B. Types of risk
1. Pure – chance of loss or no loss (break-even)
2. Speculative – chance of loss or gain; often referred to as a “business risk”
C. Risk management terms and definitions
1. Exposure – a situation, practice, or condition that gives rise to a loss from a given peril leading to an adverse financial consequence; an activity or resource; people and assets
2. Peril – the cause of a loss
3. Hazard – a condition or circumstance that may give rise to a loss from a given peril; physical, moral, or moral characteristics that make the likelihood of a loss from a given peril greater
4. Incident – an event that disrupts normal activities and may become a loss, claim or business interruption
ANA:1:11/13 - 4 - © 2013 Certified Risk Managers International. All Rights Reserved.
5. Accident – an unplanned event, definite as to time and place, that results in injury or damage to a person or property
6. Occurrence – an accident with the limitation of time removed; an “accident” that is extended over a period of time rather than a single observable happening
7. Loss – a reduction in value
8. Claim – a demand or obligation for payment as a result of a loss
9. Frequency – the number of losses occurring in a given time period
10. Severity – the dollar amount of a given loss or the aggregate dollar amount of all losses for a given period
11. Expected losses – projection of the frequency and/or severity of losses based on loss history, probability distributions, and statistics; the expected loss projection is commonly called a “loss pic” or “loss pick”
Commentary: Risk management concepts should be viewed primarily from the eye of the organization. While insurance agents, brokers and insurance carriers may provide risk management services to the organization, the risk management concept is driven by the risks the organization must face.
ANA:1:11/13 - 5 - © 2013 Certified Risk Managers International. All Rights Reserved.
D. General classes of risk
1. Six General Classes of Risk
1. Economic
2. Legal
3. Political
4. Social
5. Physical
6. Juridical
1. Economic – risks arising from operations, economy, financial marketplace or entrepreneurial activities
2. Legal – risks inherent in compliance or arising from statutory liability
3. Political – risks arising from changes in the law, government reinterpretations or changes in government policy
4. Social – risks arising from public relations, loss of reputation, damage to brand, cultural issues, social direction or social media
5. Physical – risks arising from property, people or information
6. Juridical – risks arising from a jury or judge’s decision or from court or jury attitudes
ANA:1:11/13 - 6 - © 2013 Certified Risk Managers International. All Rights Reserved.
Learning Objective #2: Discuss the definition of risk management and the five steps of the risk management process.
II. Risk Management
A. Definition of risk management
Similar to “risk,” risk management has many definitions. For purposes of the CRM program, the definition of risk management is as follows:
“Process of managing uncertainty of exposures that affect an organization’s assets and financial statements using five steps: identification, analysis, control, financing and administration.”
This process can address pure risks only (traditional risk management), or pure and speculative risks (enterprise-wide risk management).
The focus of the process is two-fold:
1. Protect the assets of the organization, and
2. Protect the financial statements of the organization
Commentary: Protecting the organization’s assets and its financial statements may sound redundant, but they are different. Protecting the assets addresses the physical aspect of property and human resources. Protecting the financial statement addresses the financial impact on the organization arising out of loss to the assets and includes circumstances when the organization’s property and human resources are not involved in a loss.
ANA:1:11/13 - 7 - © 2013 Certified Risk Managers International. All Rights Reserved.
B. The Risk Management Process
Five Steps of the Risk Management Process
1. Risk Identification
2. Risk Analysis
3. Risk Control
4. Risk Financing
5. Risk Administration
ANA:1:11/13 - 8 - © 2013 Certified Risk Managers International. All Rights Reserved.
1.
R is
k M
a n
a g
e m
e n
t P
ro c
e s
s Risk Identification
The process of identifying and examining exposures of
an organization
Risk Analysis The assessment of the
potential impact of various exposures on an organization
Risk Financing The acquisition of internal and external funds to pay
losses at the most favorable cost
Risk Control Any conscious action or
inaction to minimize at the optimal cost, the probability,
frequency, severity, or unpredictability of loss
Implementation Implementing the desired
actions and risk management plans
Monitoring Examining and evaluating the results of risk management
actions and plans
Risk Administration
feedback
ANA:1:11/13 - 9 - © 2013 Certified Risk Managers International. All Rights Reserved.
1. Risk Identification – the process of identifying and examining exposures of an organization Identification is the most important step of the risk management process because an exposure and/or risk must be identified before it can be effectively analyzed, controlled, or financed. a. Four logical classifications of exposures
1) Property
2) Human resources
3) Liability
4) Net income
ANA:1:11/13 - 10 - © 2013 Certified Risk Managers International. All Rights Reserved.
b. Ten methods of exposure identification
1) Checklist and survey
2) Flowchart
3) Insurance policy review
4) Physical inspections
5) Compliance review
6) Procedures and policies review
7) Contract review
8) Experts
9) Financial statement analysis
10) Loss data analysis
2. Risk Analysis – the assessment of the potential impact of various exposures on an organization
a. Qualitative analysis –the “what” analysis
1) Risk assessment – used to identify and assess those loss exposures that cannot be easily measured by traditional statistical or financial methods and to understand their impact on the
ANA:1:11/13 - 11 - © 2013 Certified Risk Managers International. All Rights Reserved.
organization’s ultimate risks and performance
2) Financial assessment – used to identify and assess those broad loss exposures that have a financial impact on the organization but that may be difficult to quantify
3) Loss data assessment – used to identify and apply various methods of assessing loss data and to analyze the impact those losses may have on the organization’s risk management policy and the ultimate total cost of risk
b. Quantitative analysis – the “how much” analysis; attempts to accurately measure risks by using acceptable traditional methodologies which calculate relative values
1) Loss projections or forecasts
2) Cash discounting and net present value (NPV) calculations
3) Cost-benefit analyses
4) Total cost of risk calculations and analyses
ANA:1:11/13 - 12 - © 2013 Certified Risk Managers International. All Rights Reserved.
3. Risk Control – any conscious action or inaction to minimize, at the optimal cost, the probability, frequency, severity, or unpredictability of loss a. General theories of risk control
1) Human approach – people cause accidents
2) Engineering approach – things and energy cause accidents
3) Systems approach – systemic failures or weaknesses cause accidents
b. Five techniques of risk control
1) Avoidance
2) Prevention
3) Reduction (pre-loss and post-loss)
4) Segregation/separation/duplication
5) Transfer (contractual, physical or both)
Commentary: While there are five techniques of risk control, very few instances arise when the use of only one technique is appropriate. Two or more techniques are commonly used for the majority of applications. For example, a prevention technique may be applied to workers compensation injuries with a reduction technique to address the injuries that were not prevented.
ANA:1:11/13 - 13 - © 2013 Certified Risk Managers International. All Rights Reserved.
4. Risk Financing – the acquisition of internal and external funds to pay losses at the most favorable cost a. Retention – internal funds used to pay losses
1. Active (planned)
2. Passive (unplanned)
b. Transfer of financial responsibility – external funds used to pay losses
1. Non-insurance contractual transfer of control or responsibility for an exposure
2. Non-insurance contractual indemnification or financial responsibility
c. Insurance – equitable financing of risks, from one entity to another, in exchange for payment
5. Risk Administration a. Implementation
b. Monitoring
ANA:1:11/13 - 14 - © 2013 Certified Risk Managers International. All Rights Reserved.
The Risk Management Process Overview
Risk Identification Logical Classifications Property Human Resources
Liability Net Income
Identification Methods Checklist and Survey Flowchart Insurance policy review Physical inspections Compliance review
Procedures and policies review Contract review Experts Financial statement analysis Loss data analysis
Risk Analysis Qualitative Analysis Risk assessment Financial assessment Loss data assessment
Quantitative Analysis Loss projections or forecasts Cash discounting and NPV
calculations
Cost-benefit analyses Cost of risk calculations and
analyses
Risk Control Five Techniques – Pre-Loss Avoidance Prevention Reduction (pre-loss and post-loss) Segregation/separation/duplication Transfer (contractual, physical, or
both)
Post-Loss Claims management Litigation management Disaster recovery
Risk Financing Retention Active Passive Insurance
Risk Administration
Implementation Monitoring
Transfer Contractual transfer of control or
responsibility Contractual indemnification or
financial responsibility
ANA:1:11/13 - 15 - © 2013 Certified Risk Managers International. All Rights Reserved.
Learning Objective #3: Discuss the components of the total cost of risk and its use as a key risk management tool.
III. Total Cost of Risk (TCOR)
A. Definition: sum of all quantified costs and expenses associated with the risk management function of an organization
TCOR = insurance costs + retained losses + risk management departmental costs + outside services fees + quantified indirect costs
B. Components of TCOR 1. Insurance costs
2. Retained losses (passive or active) and associated loss adjustment expenses
3. Risk management departmental costs
a. Salaries
b. Administrative charges, e.g., training and travel expenses
c. Employee benefits
d. Risk management information system
e. Management overhead
f. Other departmental costs
ANA:1:11/13 - 16 - © 2013 Certified Risk Managers International. All Rights Reserved.
4. Outside services fees
a. Risk management consultants
b. Third-party administrators and other providers
c. Loss control
d. Actuarial
e. Legal
f. Fee-for-service insurance brokers
5. Indirect costs – these costs cannot be precisely measured; therefore, their impact of non- quantifiable indirect costs should be included as part of the qualitative assessment of risk
a. Disruption in production/sales
b. Management time spent on loss-related activities
c. Overtime costs
d. Hiring and training replacement costs
e. Opportunity costs
f. Loss of goodwill
g. Social costs (public image, reputation, etc.)
ANA:1:11/13 - 17 - © 2013 Certified Risk Managers International. All Rights Reserved.
C. Objective of the risk manager – to minimize the TCOR by identifying those factors from each component that can be more effectively managed and controlled
ANA:1:11/13 - 18 - © 2013 Certified Risk Managers International. All Rights Reserved.
Impact of a Loss on TCOR and Sales/Revenue Regardless of whether or not the organization includes the TCOR in the pricing of its products or services, any loss that is prevented or reduced improves the financial results of the organization.
Steps to measure the impact of a loss on sales or revenue:
1. Determine the profit margin of the organization
2. Divide the loss cost by the profit margin. The result is the
sales or revenue required to pay for the loss.
Sales/Revenue Required to Pay for Losses
Loss Cost
Profit Margin 1% 2% 3% 4% 5%
$1,000 $100,000 $50,000 $33,000 $25,000 $20,000 $5,000 $500,000 $250,000 $167,000 $125,000 $100,000
$10,000 $1,000,000 $500,000 $333,000 $250,000 $200,000 $25,000 $2,500,000 $1,250,000 $833,000 $625,000 $500,000
$100,000 $10,000,000 $5,000,000 $3,333,000 $2,500,000 $2,000,000 Which is easier for an organization to accomplish: preventing a loss of $10,000 or increasing sales or revenue by $1,000,000?
ANA:1:11/13 - 19 - © 2013 Certified Risk Managers International. All Rights Reserved.
Example of TCOR (direct costs only)
Insurance costs (net of commissions) $ 800,000 (42%) Retained losses and settlement expenses 850,000 (45%) Risk management departmental costs Salaries, benefits, expenses 100,000 ( 5%) Outside services Consulting, brokerage services 50,000 ( 3%) Claims administration 85,000 ( 4%) Loss control expenses 25,000 ( 1%) Total $ 1,910,000 f(100%)
Questions to consider:
Is this good or bad?
How does this compare with revenue from year to year?
How does it compare with the competitors?
How can we pass this TCOR to the customers through product pricing?
Outside Services
Claims Administration
Consulting
Other Risk Control
Retained Losses and ALAE
Risk Management Department Costs
Insurance Premiums
Outside Services
Claims Administration
Consulting
Other Risk Control
Retained Losses and ALAE
Risk Management Department Costs
Insurance Premiums
ANA:1:11/13 - 20 - © 2013 Certified Risk Managers International. All Rights Reserved.
D. The TCOR is used as a key risk management tool to assist with:
1. Making effective risk management decisions
2. Measuring progress toward risk management objectives
3. Focusing on and promoting safety and loss control by communicating the financial impact of a loss on the TCOR and sales/revenue
4. Providing management and employee incentives
5. Pricing of products and services
6. Assisting with effective management of financial budgets
ANA:1:11/13 - 21 - © 2013 Certified Risk Managers International. All Rights Reserved.
Visualization Exercises
1. Jumping Jacks, Ltd. is a manufacturer of jump ropes with a five-year frequency of losses as follows:
X1 120
X2 383
X3 247
X4 301
X5 199
What will predicted losses be in Year X6?
What is the range of losses that might be expected to occur in Year X6?
What is the degree of certainty of these predictions?
2. Robert is a regional distributor of Jumping Jacks products. He stores his inventory in a warehouse his organization owns. Robert is considering either installing smoke detectors, to reduce the impact of possible fire losses, at a cost of $50,000 or renting additional space at another location to separate his inventory at an additional cost of $60,000.
Which should he do?
ANA:1:11/13 - 22 - © 2013 Certified Risk Managers International. All Rights Reserved.
3. A safety consultant suggests Robert also consider a sprinkler system that will cost $16,000 to install. Its installation will reduce Robert’s property insurance premiums by $2,000 annually. The expected life of the sprinkler system is 15 years. Robert’s CFO states the company should earn 16% on its investment.
Should Robert install the sprinkler system? 4. Jumping Jacks, Ltd. has just hired you as its first risk
manager. During your first week, the CFO has presented you with a list of losses that occurred over the last five years. He states that he believes Jumping Jacks, Ltd. would save money by reducing controllable losses and retaining the remainder instead of buying very expensive insurance.
a. How would you verify the loss data?
b. How would you classify the loss data?
c. How would you determine the viability of a possible retention program?
d. How much should you retain?
e. Would you continue to buy insurance, and if so, how much would you buy?
f. What level of deductible would you buy?
ANA:1:11/13 - 23 - © 2013 Certified Risk Managers International. All Rights Reserved.
Learning Objective #4: Discuss the uses of risk analysis and the necessary tools to perform a risk analysis.
IV. Risk Analysis
A. Uses of risk analysis
1. Prioritization of risk factors
2. Verification of loss data
3. Classification of loss data
4. Prediction of losses and ranges of losses
5. Cost-benefit decision making
6. Net present value (NPV) analysis
7. Review of insurance program structure to determine:
a. Viability of a retention program
b. Amount of retention
c. Insurance purchasing decisions, including limits of liability
ANA:1:11/13 - 24 - © 2013 Certified Risk Managers International. All Rights Reserved.
B. Risk analysis tools
1. Tools used to assess the likelihood an event will occur
a. Loss analysis
b. Risk mapping or risk factor analysis
c. Probability analysis
d. Linear regression
2. Tools used to assess the impact of the event should it occur
a. Payback analysis and accounting rate of return
b. Cost-benefit analysis
c. NPV analysis
d. Internal rate of return (IRR) method
ANA:1:11/13 - 25 - © 2013 Certified Risk Managers International. All Rights Reserved.
Review of Learning Objectives
1. Discuss the definitions of risk and the general classes of risk. (p. 2)
2. Discuss the definition of risk management and the five steps of the risk management process. (p. 6)
3. Discuss the components of the total cost of risk and its use as a key risk management tool. (p. 15)
4. Discuss the uses of risk analysis and the necessary tools to perform a risk analysis. (p. 23)