Every business decision involves some chance of things going worse than hoped. You cannot remove that, but you can look at it more carefully than a gut feeling allows. The tools below are deliberately simple, because small businesses rarely have the data for complicated models. All numbers in this article are hypothetical and chosen only to show the method. Real outcomes are uncertain, and a careful estimate is still an estimate.
Two questions for every risk
For any possible problem, ask:
- How likely is it to happen?
- If it did, how much would it hurt?
The first is likelihood and the second is impact. A risk that is likely but trivial, such as a small supplier delay, may deserve a quick fix rather than worry. A risk that is unlikely but severe, such as losing your only workspace, may deserve a plan. The ones that are both likely and severe deserve attention first.
You do not need exact probabilities. Rough bands such as low, medium and high are enough to start, as long as you use them consistently.
A simple scoring table
Give likelihood a score from 1 (rare) to 5 (very likely), and impact a score from 1 (minor) to 5 (could threaten the business). Multiply them to get a rough priority score. Here is a hypothetical list for a small online shop:
| Risk | Likelihood | Impact | Score |
|---|---|---|---|
| Main supplier is late with a shipment | 3 | 2 | 6 |
| Customer data is exposed | 2 | 5 | 10 |
| A popular product is out of stock for a week | 4 | 2 | 8 |
| Owner falls ill for a month | 2 | 4 | 8 |
Checking the arithmetic: 3 x 2 = 6, 2 x 5 = 10, 4 x 2 = 8, and 2 x 4 = 8. By this crude ranking, the data exposure comes first, even though it is the least likely of the group to be noticed day to day. The scores do not say what will happen. They only help you decide where to spend limited attention.
A word of caution: multiplying scores treats a score of 10 from 2 x 5 as the same as 5 x 2, yet a rare catastrophe and a frequent nuisance are different problems. Use the number as a prompt for discussion, not a verdict, and give extra thought to anything with an impact of 5, whatever the multiplication says.
Putting a rough money figure on it
Where you can, translate impact into money, since decisions are easier when both sides use the same unit. A hypothetical example: suppose you are considering a one-time advertising spend of $2,000. You think there is a reasonable chance it brings in about $3,000 of extra gross profit, a smaller chance it brings in about $500, and some chance it brings in nothing.
Say you roughly estimate:
- 30 percent chance of $3,000, which contributes 0.30 x 3,000 = $900
- 40 percent chance of $500, which contributes 0.40 x 500 = $200
- 30 percent chance of $0, which contributes $0
The weighted total is $900 + $200 + $0 = $1,100. Against the $2,000 cost, the expected result is a loss of $900. The probabilities here were guesses, and you should say so out loud when you make them. Even so, the exercise shows something useful: for the spend to look sensible, either the likely outcomes must be better than you assumed or the cost must come down. It also shows how much your conclusion depends on your guesses, which is a prompt to test them with a small trial first.
Look at the downside first
A helpful discipline is to ask, “What is the worst realistic outcome, and could we survive it?” Business owners often focus on the upside and underweight what happens if things go badly. A decision with a modest gain and a loss that could close the business is usually weaker than it looks.
This matters most when borrowed money or your own assets are involved. Taking on debt turns a disappointing result into an obligation you must still meet, and a personal guarantee can place your own property on the line. Never commit more than you could afford to lose or repay if the plan underperforms. Your cash flow also decides how long you can wait for a result, so a risk that looks small on paper can still be dangerous if it arrives when cash is tight.
Ways to respond to a risk
Once you have ranked your risks, there are typically four broad responses:
- Avoid it: choose not to do the risky thing.
- Reduce it: lower the likelihood or the impact, for example with backups, a second supplier or a smaller first order.
- Transfer it: shift some of the cost elsewhere, for example through insurance or contract terms.
- Accept it: decide the risk is small enough to live with, and write that decision down.
For the shop above, a second supplier reduces delay risk, a basic security routine reduces the data risk, and the owner’s illness might be partly addressed by a written set of procedures someone else could follow. A formal contingency plan is simply this thinking written down for the most serious items.
Test before you commit
When a decision is uncertain, the cheapest way to improve your estimates is often to run a small, reversible experiment. Try a modest advertising budget before a large one, or presell to a handful of customers before ordering a big batch. Small tests turn guesses into evidence and cap what you can lose. They fit well with the habit of careful decision-making that good owners build over time.
Revisit your estimates
Risks change. A new competitor, a changed regulation or a bigger customer base shifts both likelihood and impact. Keep your table somewhere visible and review it every few months, and after any major event. Compare what you predicted with what happened. Over time, this makes your guesses better calibrated, even though no method can remove uncertainty.
The aim is not to eliminate risk, which is part of running a business, but to take the risks you choose deliberately, with eyes open to what you could lose and what you realistically stand to gain. For significant decisions involving legal, tax or insurance questions, consult a qualified professional who knows your situation and your location.