Risk Management For Small Businesses

Legal risk management has always been importantcourse.)
for individuals, businesses and non-profit organizations.In its purest form, risk management is simply the
What has changed is this. In the current economicprocess of:
climate, when having to pay out of pocket for an1. Identifying risks.
uncovered claim, legal defense costs or a settlement2. Identifying the potential impact of those risks.
or judgment may mean the difference between3. Deciding how to eliminate or minimize the potential
survival or failure, what has always been importantimpact of those risks.
has now become necessary and imperative. But it'sSo, when I am helping a client manage legal risks, I
not all about survival. Effectively managing risk nowhave two general goals in mind. They are (a) to avoid
will better position any business owner or businesslegal liability so that my client isn't taking any risks he
organization for greater success when the economyshe/it does not need to (through risk shifting
turns around.provisions in a contract, for example) and (b) to
While there has been a lot of news chatter on themake sure that my client can survive the potential
internet and in business and insurance publicationsdetrimental impact of those legal liability risks which
about risk management since the 2008 stock marketcannot be avoided (through adequate insurance
meltdown, it has for the most part been without thecoverage, for example).
benefit of a definition of the term. Most of the buzzLarge corporations have their own in-house risk
has been about enterprise risk management andmanagement staff and in-house attorneys to deal
insurance underwriting in the context of the insurancewith the minutia. Individual entrepreneurs, small
and banking/financial industries. Given the fact thatbusinesses and community organizations don't have
economic risk taking is the topic du jour, this may beany of that support. Which may leave you feeling like
interesting stuff, but not what those managing"tag, you're it".
smaller organizations' risks deal with from day to day.Sometimes handling your own risk management is a
What we are really interested in is trying to protectsimple task. You're going sky diving, which involves
individual entrepreneurs, small businesses, non-profitthe risk of hurtling to the ground from a great height,
organizations and their members, from bad thingsstriking it and becoming a human pancake, so you
that could happen. Or, at least, from theuse a parachute, making sure that it has been folded
consequences (generally financial) of those bad things.and packed correctly, that you are wearing it
We can get that accomplished without a lot of Wallsecurely, and that you have a backup chute. There,
Street mumbo jumbo, right? I mean, look where thatthat risk is managed pretty easily. But that's only
sort of thing has taken us.because (a) there's no uncertainty about the nature
That said, any effective risk management programof the risk or its potential magnitude and (b) there is
should start from academic risk management theoryreally only one way to minimize it. (To tell you the
boiled down to its basics, because they make a lottruth, if it were me this risk would be avoided
of sense and provide an excellent roadmap. A goodaltogether, since I would simply not jump - or better
"academic" definition of legal risk is as follows:yet, I would simply not get in the plane - but hey,
Legal risk is risk from uncertainty due to legal actionsthat's just me, and anyway, that would have been a
or uncertainty in the applicability or interpretation oflousy example for this article.)
contracts, laws or regulations.Most business activities involve more uncertainty
Depending on your type of business or organization,about the legal risks involved, which in turn means
you face certain specific legal risks, but in a generalthat deciding how to eliminate or minimize the
"big picture" sense, businesses and organizations allpotential impact of those uncertain risks will
face the same two general categories of legal risks:necessarily involve a combination of interlocking legal
1. Contractual risks. (Are your contracts legally bindingmechanisms, so require the assistance of a business
and enforceable? How do they allocate legalattorney. These mechanisms, including business entity
responsibilities? Specifically, what responsibilities docreation, contractual risk allocation (such as hold
you have? What responsibilities do your customer orharmless, indemnity and/or warranty provisions) and
clients have? If your customers or clients do not fulfillimplementation of effective business systems to
their responsibilities, what are your options?)manage operational risks such as potential employer
2. Operational risks (defined by the Basel Committee,liabilities, work together to provide the maximum
an international committee that has played a leadingavailable protection for you individually, and for your
role in standardizing bank regulations acrossbusiness or organization. And like a puzzle, when it all
jurisdictions, as "the risk of loss resulting fromfits together right, it's a pretty picture, and it makes
inadequate or failed internal processes, people andsense.
systems, or from external events").If it doesn't all fit, if it doesn't make sense, if you are
So, as long as you don't have any relationships withleft with a feeling of vulnerability to the shifting sands
any other parties in which you have any contractualof the legal liability risks you face, it is time for you
responsibilities, all of your internal processes andto consult an experienced business attorney to get
systems are flawless, and neither you nor yourthe mechanisms in place, or implement the systems
employees, subcontractors or vendors ever make ayou need, to provide that protection so that you can
mistake, you don't have to ever worry about riskkeep your eye on the future without having to
management. (That's said tongue in cheek, ofworry too much about the past.