Comparing Alternatives on a Common Basis
A mitigation decision is not simply a choice between “insured” and “uninsured.” Avoidance, reduction, retention, and transfer change an exposure in different ways, and each can bring costs or operational consequences that are not captured by the expected loss alone. A useful comparison therefore makes the alternatives consistent in scope, time period, and cost categories before ranking them.
For each alternative, identify what happens to the exposure, what costs the organization incurs, what loss remains with it, and whether the option meets operational or risk-appetite requirements. In the examples below, all figures are hypothetical annual amounts. Costs are treated as occurring on the same basis, with no tax effects or discounting. Any quoted transfer is assumed to operate exactly as specified; contract limitations and counterparty failure are outside the comparison.
Use the same exposure and time horizon for every option. Include costs that differ because of the option, such as an annual control cost, a premium, a substitute operating arrangement, or an explicitly identified funding and administration cost. Do not count a cost twice. For example, if an insurance premium already includes a service fee, do not add that fee again unless it is separately incurred.
What Each Alternative Changes
| Alternative | What changes | What to include in the comparison |
|---|---|---|
| Avoidance | The activity or source of exposure is discontinued. | Costs of exit or replacement, and the value of operations or opportunities forgone; losses from the avoided exposure cease if it is fully removed. |
| Reduction | Controls lower the probability of loss, its severity, or both. | Control and ongoing operating costs, plus the expected loss remaining after the controls. |
| Retention | The organization keeps the exposure and funds losses itself. | Expected retained losses and any specified funding, administration, or liquidity costs. |
| Transfer | A contract or other arrangement shifts a defined part of the loss to another party. | Premiums or fees and the expected portion of loss that remains with the organization. |
Avoidance is not necessarily costless: ending a useful activity can sacrifice revenue or require a substitute. Reduction does not necessarily remove the exposure: an event can still occur after controls are installed. Retention can be a deliberate choice, but the expected loss is not the same as a funded amount available on the date of loss. Transfer changes who bears the specified loss; it does not automatically eliminate the underlying event or its operational consequences.
Why Expected Loss Is Calculated This Way
Suppose an exposure has one possible loss event in a year, with probability \(p\), and the loss if it occurs is \(L\). The loss is zero if no event occurs. Expected loss is the probability-weighted average of these two outcomes:
If a mitigation changes both the event probability and the loss amount, use the probability and severity that apply after that mitigation. If severity has several possible values conditional on an event, weight each severity by its conditional probability first. This is why comparing a control’s cost with the original expected loss alone can be misleading: the relevant benefit is the expected loss avoided relative to the specified baseline.
Worked Comparisons
Worked Example: Four Choices for a Data-Service Interruption
A hypothetical insurer relies on a data service. Without mitigation, an interruption occurs in a year with probability \(0.08\) and causes a loss of $500,000. Compare four mutually exclusive annual alternatives. Avoidance uses a substitute service costing $50,000 per year and removes this exposure. Reduction costs $18,000 per year and changes the event probability to \(0.04\), with a loss of $300,000 if it occurs. Retention keeps the original exposure and adds $7,000 per year for internal funding administration. Transfer costs a $24,000 annual premium and shifts 80% of each loss, leaving 20% with the insurer. Assume no other costs or consequences are quantified.
Method. Calculate the expected loss retained under each option, then add that option’s annual cost. The baseline expected loss is \(0.08 \times \$500{,}000 = \$40{,}000\).
Avoidance. The stated substitute cost is $50,000 per year, and the exposure is removed. Expected retained loss is $0, so annual expected cost is \(\$50{,}000 + \$0 = \$50{,}000\).
Reduction. Post-control expected loss is \(0.04 \times \$300{,}000 = \$12{,}000\). Adding the $18,000 control cost gives \(\$18{,}000 + \$12{,}000 = \$30{,}000\).
Retention. The original expected loss remains $40,000. Adding the $7,000 administration cost gives \(\$40{,}000 + \$7{,}000 = \$47{,}000\).
Transfer. The insurer retains 20% of a $500,000 loss, or \(0.20 \times \$500{,}000 = \$100{,}000\). Expected retained loss is \(0.08 \times \$100{,}000 = \$8{,}000\). Annual expected cost is \(\$24{,}000 + \$8{,}000 = \$32{,}000\).
Check and interpretation. In increasing order of annual expected cost, reduction is $30,000, transfer is $32,000, retention is $47,000, and avoidance is $50,000. These totals equal each option’s stated annual cost plus its calculated expected retained loss. On this measure, reduction is least costly; the ranking alone does not show whether the organization can tolerate the loss that remains under reduction.
Common mistake avoided: Comparing the $24,000 premium with the $18,000 control cost and concluding that reduction is cheaper by $6,000 ignores the retained losses under both options. The comparable totals are $30,000 and $32,000.
Worked Example: Reduction When Severity Has Two Possible Values
A hypothetical processing unit can experience at most one outage per year. Before mitigation, the probability of an outage is \(0.10\). Conditional on an outage, the loss is $100,000 with probability \(0.60\) and $600,000 with probability \(0.40\). A control costs $10,000 annually. After installation, the outage probability is \(0.06\); conditional on an outage, the loss is $80,000 with probability \(0.60\) and $400,000 with probability \(0.40\). Compare reduction with retaining the original exposure at an annual funding and administration cost of $4,000, and with transfer of 75% of every loss for a $19,000 annual premium. Assume there are no other costs.
Method. First calculate conditional expected severity, then multiply by the applicable event probability. This separates the chance of an outage from the possible sizes of its loss.
Baseline expected loss. Conditional expected severity is \((0.60 \times \$100{,}000) + (0.40 \times \$600{,}000) = \$60{,}000 + \$240{,}000 = \$300{,}000\). Thus baseline expected loss is \(0.10 \times \$300{,}000 = \$30{,}000\).
Reduction. After the control, conditional expected severity is \((0.60 \times \$80{,}000) + (0.40 \times \$400{,}000) = \$48{,}000 + \$160{,}000 = \$208{,}000\). Post-control expected loss is \(0.06 \times \$208{,}000 = \$12{,}480\). Adding the $10,000 control cost gives annual expected cost of \(\$12{,}480 + \$10{,}000 = \$22{,}480\).
Retention. Expected retained loss remains $30,000. Including the stated $4,000 annual cost gives \(\$30{,}000 + \$4{,}000 = \$34{,}000\).
Transfer. The organization retains 25% of every loss. Its conditional expected severity after transfer is \(0.25 \times \$300{,}000 = \$75{,}000\). Expected retained loss is \(0.10 \times \$75{,}000 = \$7{,}500\). Adding the premium gives \(\$7{,}500 + \$19{,}000 = \$26{,}500\).
Check and interpretation. Reduction has the lowest annual expected cost, $22,480, followed by transfer at $26,500 and retention at $34,000. As a check, transfer’s $7,500 expected retained loss is exactly 25% of the $30,000 baseline expected loss. Reduction changes both frequency and conditional severity; applying only one of those changes would not produce the stated result.
Common mistake avoided: Using the $208,000 post-control conditional severity as the annual expected loss omits the \(0.06\) outage probability. The annual expected loss is \(0.06 \times \$208{,}000 = \$12{,}480\), not $208,000.
Worked Example: Selecting an Option Under a Residual-Loss Constraint
A hypothetical service operation faces one annual outage exposure: probability \(0.05\), with a loss of $1,200,000 if it occurs. Management requires the retained loss from one outage to be no greater than $300,000. Consider four options. Avoidance ends the service and sacrifices $95,000 of annual contribution, with no remaining outage exposure. Reduction costs $22,000 annually, lowers outage probability to \(0.03\), and lowers loss per outage to $250,000. Retention adds $6,000 in annual funding and administration cost but leaves the original exposure. Transfer costs $28,000 in annual premium and shifts 75% of each loss. Assume the stated transfer performs as specified and there are no additional costs.
Method. Calculate annual expected cost and the maximum retained loss per outage for each option. Apply the $300,000 constraint separately; an option with a low expected cost is not acceptable if it violates the stated constraint.
Baseline check. Before mitigation, expected annual loss is \(0.05 \times \$1{,}200{,}000 = \$60{,}000\).
Avoidance. Expected loss is $0 and annual opportunity cost is $95,000, so annual expected cost is $95,000. Retained outage loss is $0, and the option meets the constraint.
Reduction. Expected retained loss is \(0.03 \times \$250{,}000 = \$7{,}500\). Annual expected cost is \(\$22{,}000 + \$7{,}500 = \$29{,}500\). The retained loss per outage is $250,000, so the option meets the constraint.
Retention. Expected retained loss is the baseline $60,000. Annual expected cost is \(\$60{,}000 + \$6{,}000 = \$66{,}000\). The retained loss per outage is $1,200,000, so this option violates the constraint.
Transfer. The organization retains 25% of each loss, or \(0.25 \times \$1{,}200{,}000 = \$300{,}000\) per outage. Expected retained loss is \(0.05 \times \$300{,}000 = \$15{,}000\). Annual expected cost is \(\$28{,}000 + \$15{,}000 = \$43{,}000\). The option meets the constraint exactly.
Check and interpretation. Reduction is the least-cost option among those meeting the constraint: its cost is $29,500, compared with $43,000 for transfer and $95,000 for avoidance. Retention is not eligible because its retained loss per outage exceeds $300,000. The choice also needs an operational review: for example, management should assess whether the reduced outage probability and severity are credible and whether the operating process remains workable.
Common mistake avoided: Selecting retention because its expected cost of $66,000 is below avoidance’s $95,000 ignores the explicit residual-loss constraint. Expected cost and constraint compliance answer different questions.
Make the Decision More Than a Ranking
An expected-cost ranking is a useful starting point, but it is not a complete decision rule. Two options with similar expected costs may leave very different losses when an event occurs. They may also differ in recovery time, customer impact, management effort, service continuity, or the ability to operate during disruption. Describe these consequences explicitly, even when reliable dollar values are not available.
A disciplined comparison can proceed in four steps:
Use the same exposure, period, and cost convention for each option. State what has been included and what has not.
Use the event probabilities, severities, and transferred shares that apply after each option. Do not use the unmitigated loss distribution when the option changes it.
Include stated controls, premiums, replacement costs, or funding expenses. Separately identify material operational effects that have not been assigned a dollar value.
Check risk or operational requirements before choosing among cost-ranked options. State why the selected option is acceptable and what residual exposure remains.
A frequent trap is to treat “expected loss plus premium” as the complete cost of every transfer arrangement, or to treat avoidance as having no cost because the event is removed. The correct comparison uses the stated terms and includes the costs the organization actually incurs. Another trap is to label the option with the lowest expected cost “best” without considering a material constraint, a severe retained loss, or the consequences of interrupting the operation.
Check Your Understanding
For each problem, compare the stated alternatives using the information provided. All scenarios are hypothetical.
- An annual event has probability \(0.04\) and causes a $250,000 loss. A reduction control costs $6,000 annually and changes the event probability to \(0.02\), with the same severity. What is the reduction option’s annual expected cost, and what is the expected loss without mitigation? (Answer: reduction cost $11,000; unmitigated expected loss $10,000.)
- A hypothetical equipment exposure has a 10% annual event probability and a $400,000 loss if it occurs. Avoidance costs $35,000 per year and removes the exposure. Retention adds $3,000 in annual administration cost. Which has lower annual expected cost, and by how much? (Answer: retention costs $43,000, avoidance costs $35,000; avoidance is lower by $8,000.)
- A service outage occurs with probability \(0.08\). Conditional on an outage, the loss is $100,000 with probability \(0.75\) or $500,000 with probability \(0.25\). A control costs $8,000 annually and reduces the event probability to \(0.05\), without changing severity. Calculate the control option’s annual expected cost. (Answer: conditional expected severity $200,000; post-control expected loss $10,000; annual expected cost $18,000.)
- An exposure has a 5% annual event probability and a $600,000 loss. Transfer costs $16,000 annually and shifts 70% of each loss. Retention has an annual funding cost of $2,000. Calculate both annual expected costs and identify the lower-cost option. (Answer: transfer $25,000; retention $32,000; transfer is lower by $7,000.)
- A hypothetical exposure has a 2% annual event probability and a $2,000,000 loss. A control costs $15,000 per year and lowers the probability to \(0.01\), with unchanged severity. A requirement limits retained loss per event to $1,000,000. Does the control satisfy the requirement, and what is its annual expected cost? (Answer: no; retained loss per event is $2,000,000, which exceeds the limit; annual expected cost is $35,000.)