The risks that actually close small businesses
The risks that destroy small businesses are not the ones in the news. They are the quiet, structural ones that sit inside the business for years before they matter. Customer concentration — one client represents thirty or forty percent of revenue, and the business has no plan for the day that client leaves. Owner dependency — the business cannot function for a month without the owner in the building. Cash flow gaps — the business runs profitably on an annual basis but does not have the cash to survive a slow quarter.
Each of these risks is knowable and measurable. Customer concentration shows up in the revenue report. Owner dependency shows up in the org chart. Cash flow gaps show up in the bank statement. The problem is not that the risks are hidden. The problem is that nobody has put a dollar figure on them and asked what happens if this goes wrong next month.
We do that work. We sit down with the owner, read the financials, and build a list of the things that could cause serious financial damage. Then we size each one, measure the defenses that already exist, and build a plan to close the gaps.
Risk management is the defensive foundation of the broader business financial planning we do with owners across Northern New Jersey. Every other business decision rests on whether the business can survive a bad quarter.
Four risks we find in almost every small business
- Customer concentration. If losing one client would cut revenue by more than fifteen percent, the business has a concentration problem. The fix is not always finding new clients — sometimes it is building a cash reserve that can absorb the loss while the pipeline rebuilds.
- Owner dependency. If the owner is the only person who can do a critical function — sell, deliver, sign checks, talk to the bank — the business has a single point of failure. Key person insurance is part of the answer. Management depth is the rest.
- Cash flow timing. Many profitable businesses fail because cash comes in slower than it goes out. A business that invoices on net-sixty terms and pays payroll weekly needs a line of credit or a cash reserve to bridge the gap.
- Under-insurance. A slip-and-fall lawsuit, a cyber breach, a fire, or a vehicle accident can produce a judgment that exceeds the policy limits. We review every policy against the actual exposure and flag the gaps.
Building the defenses
Risk management is not about eliminating risk. That is not possible. It is about reducing the risks that would be fatal and accepting the ones that would be merely inconvenient. A business that can survive the loss of its largest client, the absence of its owner for ninety days, and a slow quarter without laying anyone off is a business that is hard to kill.
The defenses are not complicated. A cash reserve of three to six months of fixed expenses. A line of credit established before it is needed, when the business is healthy and the bank is willing. Insurance coverage that matches the actual liability exposure, reviewed annually. A management team that can run the operation for a defined period without the owner. A documented plan for the three worst scenarios the owner can imagine.
We build the plan, size each defense, and review it annually. The first year is the most work. After that, the review is a conversation — what changed, what grew, and whether the defenses still fit.
The insurance side of business risk — key person, continuation, liability — connects to the independent coverage review we do for business owners who need protection sized to the real risk.
“The risks that close businesses are not surprises. They are known problems that nobody sized, measured, or planned for until it was too late.”
What working with us looks like
First meeting — the risk inventory
We come to your place of business. We review the financials, the customer list, the insurance policies, and the org chart. We ask the owner to describe the three worst things that could happen to the business in the next year. We put a dollar figure on each one.
Written risk management plan
You leave with a document that names every material risk, sizes the financial exposure, and maps the defenses that need to be built — cash reserves, insurance changes, structural adjustments, and contingency plans. We coordinate with your insurance agent and attorney on implementation.
A note on fit
When this might not be right for you
Business risk management is not the right fit for every owner:
- Anyone looking for a firm that sells business insurance. We review and recommend — we do not sell.
- Anyone whose business is too early-stage to have meaningful financial data. The risk analysis requires at least two years of financials.
- Anyone who wants a risk assessment but is not willing to act on the findings. The plan is only useful if the defenses get built.
If any of those describe you, we will say so on the first call.
Frequently asked questions
What does business risk management include?
It includes identifying and sizing the financial risks the business faces — customer concentration, owner dependency, cash flow gaps, and under-insurance — and building defenses for each one. The result is a written plan with specific actions and timelines.
How do you measure business risk?
We put a dollar figure on each risk. How much revenue is at stake if the largest client leaves? How many months of fixed expenses can the business cover from reserves? What is the gap between the insurance limits and the realistic liability exposure? Real numbers drive real decisions.
Do you sell business insurance?
No. We are fee-only fiduciaries. We review existing coverage against the actual exposure and recommend changes. We coordinate with your insurance agent or introduce you to an independent broker. We earn no commissions.
How much cash reserve should a small business have?
A useful starting target is three to six months of fixed expenses — rent, payroll, insurance, loan payments. The right number depends on the business's revenue volatility and the owner's ability to access credit. We size the reserve to match the actual risk profile.
How often should the risk plan be reviewed?
At least once a year, and after any major change — a new large client, the loss of a key employee, a significant growth phase, or a change in the insurance market. The risks evolve, and the defenses should evolve with them.
Can you help with cybersecurity risk?
We review cyber insurance coverage and flag gaps. For the technical side — security assessments, penetration testing, IT policies — we introduce you to specialists. The insurance conversation and the technical conversation are both necessary.