Hazard Risk • 99
continuity business interruption, and other insurance coverage the com-
pany maintains at the time of the quantication risk engagement.
e nal, dicult portion of these engagements is to discuss what prod-
ucts, services, plants, or divisions have an exposure above the coverage
line or risk appetite line. e insurance industry regularly uses the term
risk appetite to denote the amount of insurance coverage a company has
paid for to recoup losses or damages, based on the risks the company sees
and how aggressive they want to be in terms of taking risks and support-
ing those risks with mitigation plans and insurance. As seen in Figure5.3,
when exposure or VAR lies above the coverage of risk appetite line, that
situation drives the dialogue between the organization and its insurer or
consultancy in an attempt to decide on the next steps. ose next steps
normally include spending time and funds to develop more robust miti-
gation policies, procedures, and programs or increasing coverage to miti-
gate the exposure and risk. A company can also elect to assume some risk
through self- insurance. And nally, scanning Figure5.3 and viewing the
dierences in column heights, we’ll attempt to provide a brief explanation
in the context of these quantication tools and techniques.
e dierence in column heights, which is prot exposure or VAR, per
asset, is the dierence between VAR exposure identied without or with
risk mitigation strategies in place by the company. For instance, for Plant 1,
there is obviously a set of mitigation plans in place to be used in the event
that the plant is disrupted, because the lighter shaded column (mitigated)
has much less VAR or exposure than the dark or unmitigated column.
When the insurance experts complete the engagement, they calculate the
total company VAR or exposure versus the amount of insurance cover-
age the company maintains at the time of the engagement and use the
horizontal line to “make a point” about what assets have more VAR or
exposure than the amount of insurance coverage. e bottom line of a risk
quantication engagement is to discern whether a company has too much
or not enough insurance based on the risks identied, mitigation plans in
place and the company’s risk appetite, which is indicative of their existing
coverage level.
Outcomes from this type of nancial risk quantication engagements
and the benets tend to be as follows:
• e calculation of maximum foreseeable losses
• A root cause analysis that highlights risk exposure