Risk transfer vs retention: avoid, reduce, transfer or retain

Once you know a risk exists, you can do one of four things with it: avoid it by stopping the activity, reduce it with prevention or protection, transfer the financial consequence to someone else, or retain it and pay for it yourself. Most risks get a mix. The working rule of thumb is to transfer what you cannot afford to lose, retain what is small, frequent and predictable enough to budget, reduce whatever is cheap to reduce, and avoid what is not worth the trouble.

This is the "response" step in the routine laid out in risk management for small businesses: a practical framework. The larger companies' version in the Enterprise risk management (ERM) explained guide uses the same four moves. ISO 31000:2018 lists the same choices in more detail, including sharing risk through insurance, contracts or partnerships and retaining it as an informed decision.

The four responses compared

Transfer is more than insurance

Insurance is the best-known transfer, but business owners use several others, and they interact.

• Insurance. The policy moves the cost of covered losses above your retention to the insurer, in return for premium. The terms decide what actually moves: limits, exclusions, conditions.
• Contracts. An indemnity or hold-harmless clause shifts liability to another party. contractual risk transfer: shifting liability by contract and insurance explains how that works and where it breaks. Construction is the heavily regulated case: statutes such as Texas Insurance Code chapter 151 and New York General Obligations Law section 5-322.1 limit or void certain indemnity promises, and other states have their own versions. Check the state before relying on a clause.
• Insurance requirements in contracts. A requirement that a vendor name you as an additional insured or give you a waiver of subrogation only helps if the vendor's policy responds. A certificate is a summary, not a guarantee; see certificates of insurance: what they prove and what they do not.
• Bonds. A surety bond transfers the risk that a contractor does not finish or pay its subs, and the surety looks to the principal for repayment.
• Outsourcing and leasing. Paying a payroll company for payroll processing, or leasing rather than owning vehicles, moves some operating risk, but never your legal accountability for your employees or customers.
• Legal structure. A corporation or LLC can limit owners' personal liability for business debts, but owners who sign personal guarantees stay exposed, and the structure does not shield the business's own assets from a judgment.

What transfer does not move: reputation, regulatory obligations, the customer who leaves, and the effort of managing the claim. A transferred risk can also come back. When an insurer becomes insolvent, a contract counterparty cannot pay, or a policy exclusion applies, you hold the loss.

Retention takes several forms

• Deductible. You pay the first dollars of each claim, and the insurer pays the rest within limits. See deductibles vs self-insured retentions: who pays first for the differences from a self-insured retention, such as who handles the claim and whether limits sit above or include the retention.
• Self-insured retention (SIR). Similar, but common on liability and umbrella policies. The insured pays the retention itself, often including defense costs, and the policy responds above it.
• Large-deductible programs. Common in workers' comp for larger employers, often with collateral and a third-party administrator. See large deductible workers' comp programs: how they work and what they cost.
• Group captives and risk retention groups. Pooled arrangements in which members share a layer of losses; see what is a captive insurance company and how does it work? and Risk retention groups (RRGs): how they work and what to check.
• Uninsured exposures. Risks nobody insured, either deliberately (fine) or by oversight (not).

A retention costs something even when no claim occurs: you set money aside, tie up working capital or post a letter of credit. The Total cost of risk (TCOR): what it includes and how to calculate it guide counts those costs.

How to decide

Judge each risk on five questions.

1. Severity. Could a single event threaten solvency, a loan covenant or the owner's personal finances? If yes, transfer it, and keep avoiding or reducing it too.
2. Frequency and predictability. Losses that occur often and are consistent in size are predictable, so insurance on them mostly swaps your own dollars for the insurer's, plus its expenses and profit. Budget for them instead and work on prevention.
3. Capacity. What retained loss can you pay from cash in a bad year without missing payroll or breaching a lender's terms? Use a number agreed with your finance lead, then test it.
4. Control. Can you influence the loss? Safety, claims management and return-to-work programs pay off more when you hold some of the cost.
5. Price of transfer. Compare the premium reduction from a higher retention with the extra losses you expect to keep. Often the market gives you cheap options in one line and expensive ones in another.

A quick map:

A hypothetical retention decision

Say a 60-employee HVAC contractor in Ohio with $9 million in revenue has a property and equipment package. Its broker quotes two options:

• Option A: $14,000 premium, $2,500 deductible per claim.
• Option B: $11,200 premium, $10,000 deductible per claim.

The savings from B are $2,800 a year. The contractor's loss runs show about 2 claims per year averaging $6,000.

• Under A, expected retained losses are 2 × $2,500 = $5,000, so premium plus retention is $19,000.
• Under B, expected retained losses are 2 × $6,000 = $12,000, so the total is $23,200.

A is cheaper by $4,200. Each claim of $6,000 costs $3,500 more to retain under B ($6,000 vs $2,500), so B pays off only below $2,800 ÷ $3,500 = 0.8 claims a year, about one claim every 15 months. In a bad year of 6 claims at $6,000, A retains $15,000 and B $36,000. The deductible and retention break-even calculator runs this comparison with an aggregate cap, and shows when a cap changes the answer.

The averages hide something. One claim of $500 and one of $11,500 average $6,000, but B would retain $10,500 of that, not $12,000. Use your actual claim list, not just the mean. And a contractor with $300,000 of cash may choose A for another reason: it would rather pay a few thousand more each year than carry the variance.

The market cycle changes the price of transfer

The relative cost of transfer moves by line. The Marsh Global Insurance Market Index for the second quarter of 2026 (released July 23, 2026) showed U.S. property rates down 13%, U.S. casualty up 7%, U.S. cyber down 2% and U.S. financial and professional lines up 1%. When property is getting cheaper, buying back a lower deductible or higher limit may cost less than it did a year ago. When casualty prices rise, a higher retention or an alternative structure looks better, but only if you can fund it. Read hard and soft insurance markets: what the cycle means for buyers for how the cycle works, and ask your broker to price both directions at renewal.

Traps

• Retaining by default. The biggest retained risks in most small companies are the ones no one decided about: the income gap after a fire, an excluded cause of loss, a contract indemnity that exceeds the policy.
• Insuring the small stuff. A low deductible on frequent claims is expensive, and it hides loss patterns from management.
• Contracts that cap your retention. Leases, lenders and customers often limit deductibles or SIRs. Check before accepting a quote.
• Retention without a reserve. Decide the funding source, whether a bank balance, a line of credit or a reserve account.
• Forgetting collateral and fees in large-deductible programs.

Key takeaways

• The four responses are avoid, reduce, transfer and retain. Most risks need a combination.
• Transfer severity you cannot absorb. Retain what is small, frequent and predictable, and work to reduce it.
• Insurance is one form of transfer. Contracts, bonds and outsourcing are others, and they only work if the counterparty can pay and the law allows the shift.
• Pick retention from your capacity in a bad year, not from the biggest premium discount. Test it with real claim data.
• Price of transfer changes by line and over time, so revisit retentions every renewal.