Four ways to look at risk.
- Risk with low probability and minimal damage
- Risk with high probability and minimal damage
- Risk with low probability and catastrophic damage
- Risk with high probability and catastrophic damage
Risk with low probability and minimal damage can be self-insured, meaning I am willing to accept the risk and endure the consequences.
Risk with high probability and minimal damage will depend on my threshold and tolerance for pain. Even a splinter in a finger can be annoying.
Risk with low probability and catastrophic damage creates mitigation behavior. I may be willing to accept the risk, but in the event the risk occurs, I want to mitigate the damage. I may seek outside protection, an insurance product. Insurance rates depend on low probability to calculate the premium.
Risk with high probability and catastrophic damage creates prevention behavior. To protect my best prevention behavior that inevitably fails, I may seek outside protection, an insurance policy. Insurance rates consider the high probability to calculate the premium and often, actively participate in the prevention behavior.
What risks come with your business model? How do you manage that risk?
Nicely stated. When it comes to risks, they can be either:
-Accepted
-Rejected
-Transferred
-Mitigate
When it comes to oragnizational risks, they should be reduced to acceptable levels after analysing the annualized rate of expectancy. What comes next should be the” Defense in Depth”.