Overview: Insurance (risk transfer) is just one of six strategies for managing risk. A complete risk manager — and a well-prepared exam candidate — understands all six and knows which fits which situation.

Think of these methods as a toolkit. No single tool is right for every situation; the appropriate choice depends on how likely the loss is and how severe it would be.

1. Avoidance

Risk avoidance means eliminating an activity or situation entirely so the risk cannot materialize. It is the only strategy that reduces the probability of loss to zero — by removing the exposure from existence. A company that decides not to enter a market where it would face an uninsurable political risk is practicing avoidance. An individual who decides not to take up hang-gliding is doing the same.

Avoidance is most appropriate when the potential severity is high and the benefit of accepting the risk does not justify the exposure. Its obvious limitation is opportunity cost: avoiding a risk means forgoing whatever value the activity would have produced.

2. Prevention (Loss Control — Before)

Prevention focuses on reducing the probability that a loss event will occur in the first place. Sprinkler systems designed to stop a fire from starting, regular medical checkups to catch disease early, and background checks to prevent theft before it happens are all prevention measures. The goal is to intervene before the event.

3. Reduction (Loss Control — After)

Reduction accepts that a loss event may occur but seeks to minimize its severity when it does. A seatbelt does not prevent car accidents; it reduces the severity of injuries when an accident happens. Building fire doors reduce how far a blaze spreads. Wearing a hard hat on a construction site reduces the severity of a head injury. Disaster recovery plans minimize how long a business is shut down after a cybersecurity breach.

On the exam, the prevention/reduction distinction is testable: prevention lowers frequency; reduction lowers severity.

4. Retention (Acceptance)

Retention means consciously accepting that a risk exists and absorbing any losses out of one's own resources. This is appropriate for low-severity, high-frequency losses where the cost of insurance or prevention would exceed the expected loss, or where the risk is simply uninsurable.

Retention can be passive (accidentally failing to address a risk you didn't notice) or active (a deliberate decision to self-insure). A business that chooses a high deductible on its health plan — paying the first $5,000 of claims per employee itself — is practicing active retention for small, predictable losses while transferring catastrophic losses to the insurer. This hybrid approach is very common in commercial insurance and is sometimes called self-insurance when formalized with a dedicated fund.

5. Sharing

Sharing distributes risk among multiple parties so that no single entity bears the full financial burden. Unlike transfer, where risk moves entirely to someone else, sharing means all parties absorb a portion. Joint ventures, risk-pooling cooperatives, and captive insurance groups are commercial examples. On the personal side, pooling resources with co-owners of a vacation property shares both costs and exposures.

6. Transfer

Transfer shifts the financial obligation for a loss to another party. Insurance is the most common form of risk transfer, but the concept extends to contractual mechanisms like hold-harmless agreements, indemnity clauses in leases, and performance bonds.

Transfer is most appropriate for low-frequency, high-severity risks — events that are unlikely but would be financially devastating if they occurred. A homeowner does not buy home insurance because they expect their house to burn down; they buy it because if it did, the financial loss would be catastrophic. The premium is a small, certain cost that protects against a large, uncertain one.