logo
20th anniversary logo

Risk Assessment, Loss Prevention & Risk Mitigation

Businesspeople surrounded by office buildings surrounded by photographs of potential hazards

Understanding hazard and operational risks is fundamental to the development of strategies for loss prevention, deterrence, hazard mitigation, risk transfer and financing, and the development of response and continuity plans.

We survey facilities, evaluate hazards and vulnerabilities, and develop detailed recommendations using the latest national codes, standards, and insurer requirements. We compile risk scenarios into a risk database. 

Risk Assessment

Understanding risk is challenging. There are numerous areas of risk—strategic, financial, operational, and hazard-based. There are numerous “hazards” or causes and a seemingly limitless number of possible scenarios. There are many “assets” at risk—people, facilities, real, digital, and intellectual property, business operations, the environment, finances, reputation, and relationships with stakeholders.


Understanding hazard and operational risks—their likelihoods and potential impacts—is a prerequisite for risk management and decisions to accept, avoid, transfer or finance risk. Loss prevention, deterrence (of human-caused intentional acts), hazard mitigation, and response and recovery plans must be based on an accurate and realistic understanding of potential risks.


A risk assessment seeks to identify the possible threats and hazards that could cause unacceptable impacts to the assets of an entity. Potential impacts are determined through analysis of foreseeable scenarios for each hazard and the varying potential magnitudes, hazard locations, and velocities. The assessment should also identify vulnerabilities of exposed assets and the adequacy of protection that could limit impacts.

A flowchart depicting the risk assessment process including hazards, assets at risk, and impacts

The risk assessment process.
Prevention and deterrence reduce the likelihood that a hazard will occur. Mitigation reduces the potential severity of impacts caused by the hazard.

Risk assessment looks outward and then moves inward. Understanding the vulnerabilities of infrastructure supporting a facility, hazards from surrounding properties, the site layout, building construction and protection, and the location and concentration of people, critical operations, systems, and equipment is essential to assessing the potential scope and magnitude of impacts on life, property, and operations.


Assessment of operational impacts should follow the process of a business impact analysis, which is foundational to business continuity planning.

Half of a

Risk Identification: Threats & Hazards List

  • Medical emergency (heart attack)
  • Workplace injury (fall, confined space, entrapment)
  • Fire or explosion including wildland fire
  • Natural hazards: Biological (foodborne illness, communicable disease, pandemic)
  • Natural hazards: Geological (earthquake, landslide, subsidence)
  • Natural hazards: Meteorological (hurricane, flooding, storm surge, lightning, hail, tornado, winter storm, arctic freeze)
  • Hazardous materials spill or release (on-site, off-site)
  • Terrorism (CBRNE)
  • Active shooter/Hostile Event
  • Bomb and other threats, suspicious package
  • Civil disturbance, protest
  • Strike
  • Workplace violence
  • Abduction, kidnapping
  • Robbery, theft
  • Vandalism
  • Machinery breakdown
  • Infrastructure/utility interruption or disruption (electricity, water, fuel, telecommunications, HVAC)
  • Cyber-attack, network penetration, malware
  • Information Technology outage (network, application, data availability; data loss)
  • Supplier failure including logistics

Risk Evaluation

  • What are possible threats and hazards?
  • What are possible scenarios?
  • What are their probabilities of occurrence?
  • What assets are at risk?
  • How vulnerable are people, property, business operations, and the environment?
  • What are the potential impacts?
  • What is the impact on business operations?

The risk assessment should assess whether:

  • Emergency response, business continuity, and crisis management plans address foreseeable scenarios
  • Additional actions should be taken to prevent, deter, or mitigate identified risks
  • Insurance and risk financing strategies are in place to mitigate the financial impacts of loss potential

Risk Assessment Services

Preparedness, LLC surveys facilities to assess property hazards and operational risks using codes, standards, and “highly protected risk” insurance underwriting criteria. We write detailed reports with findings and recommendations for reducing risk.


We compile risk scenarios into a database that can include all facilities within the organization.  We develop objective criteria specific to each organization that is embedded into the database to rate the probability of occurrence and the severity of impacts (e.g., life safety, property, operations, environment, reputation, and financial). The formula that calculates an overall rating for each scenario is customized for each client.


We work with our clients to standardize the fields of risk information to enable compilation of a company-wide risk database to provide senior executives with a single, go-to source for decision-making. The database has capabilities to filter, sort, and aggregate risk scenarios by overall hazard rating, business unit, location, type of hazard, or specific type of impact. Our analyses provide management with the information needed to make effective risk management decisions to accept, deter, prevent, mitigate, or finance risk. Our business impact analyses provide more detailed information to determine business continuity strategies and requirements and to assess business interruption insurance limits.


Preparedness, LLC’s risk assessment related services include:

  • Loss prevention surveys
  • Recommendations for loss prevention and specifications for hazard mitigation
  • Threat and hazard assessments
  • Security and vulnerability analyses
  • Evaluation of compliance with codes, standards, and regulations
  • Business impact analyses
  • Business interruption and interdependency analysis
  • Loss estimates studies
  • Multi-location comparative risk analysis
  • Risk database compilation


Loss Prevention & Risk Mitigation

We survey facilities to assess hazard and operational risks, and we make detailed recommendations to enhance protection. We evaluate the protection of a facility using “highly protected risk” standards of the insurance industry as well as model fire prevention and life safety codes enforceable across the United States.


We develop strategies to prevent hazards, deter human-caused intentional acts, and mitigate the impacts of hazards that cannot be prevented. We develop and help implement loss prevention and risk mitigation programs.


We can estimate loss potential and compile COPE (construction, occupancy, protection, and exposure) data into an electronic database for marketing property insurance programs. We also coordinate third party loss prevention services and provide direction to support risk management.

Protecting facilities to “highly protected risk” insurance standards can reduce premiums and qualify organizations for better terms and conditions.

Free Resources

Click an image below to view and download the resource to assess your capabilities. Be sure to check out our Preparedness Bulletins, review of standards, and compilation of links to internet resources.

NFPA 1600 program self-assessment checklist, Preparedness, LLC
Preparedness Bulletin Risk Assessment
Cover page of Preparedness, LLC's Preparedness Bulletin on Business Impact Analysis
Share by: