Why Risk Depends on Objectives
An uncertain event does not have a complete risk meaning on its own. A system outage, for example, matters to an organization through what it could do to the organization’s aims: completing customer transactions, meeting a reporting deadline, or maintaining a specified level of available resources. If the aims are not stated, it is difficult to tell which consequences matter, how they should be measured, or whether a change in an outcome is important.
In enterprise risk management, risk is considered in relation to objectives. This keeps the analysis connected to what the organization is trying to achieve. It also explains why one event can present different risks for different objectives, and why the same event may matter more to one organization than another.
An objective needs enough detail to assess it consistently. A useful statement identifies a measurable result, a target or boundary, and a time horizon. “Improve customer service” expresses an intention, but does not specify how much improvement is sought or when. “Process at least 98% of claims within two business days during the next quarter” gives a measure, target, and period. The latter can be evaluated against possible outcomes.
This definition does not reduce every risk assessment to the probability that an objective will fail. Uncertainty can affect an objective in different ways, and a failure probability is only one useful summary when the objective has a clear pass-or-fail threshold. The central discipline is to identify the objective first, then describe the uncertain event’s possible effects on it.
From Uncertain Event to Objective
A practical assessment follows a short chain: state the objective, identify an uncertain event that could affect it, describe the resulting outcomes, and compare those outcomes with the objective’s measure and target. The event itself is not the objective, and naming an event does not yet say whether the objective is attained.
Specify the outcome sought, its measure, its target or boundary, and the time period.
Identify the possible event or scenario and state its probability or other uncertainty information when available.
For each scenario, determine the outcome relevant to the objective. Do not assume that an event has the same effect on every organizational aim.
Compare each outcome with the stated objective. Summarize the result in a way that answers the management question being asked.
Objective Attainment in a Scenario Model
When an objective has a clear threshold and a finite set of scenarios, a simple calculation makes the objective-relative idea precise. Let \(O\) denote the objective and let \(I_O(s)\) equal 1 if scenario \(s\) meets the objective and 0 otherwise. If the scenarios are exhaustive and mutually exclusive, and scenario \(s\) has probability \(p_s\), then:
This formula follows from partitioning the event “objective attained” across the scenarios. In each scenario, the indicator is 1 exactly when the objective is met. The probability of attainment is therefore the sum of the probabilities of the scenarios in which it is met; scenarios in which it is not met contribute zero. The probabilities must cover all possible cases and sum to 1. If the scenarios are not exhaustive, this calculation leaves out possible outcomes; if they overlap, adding their probabilities this way can count outcomes more than once.
This is a scenario calculation, not a universal definition of risk. It is appropriate when probabilities and objective outcomes are specified well enough for the calculation. If the objective is not binary, an assessment may instead track its measured outcome in each scenario. A single attainment probability does not preserve all information about those outcomes.
Worked Example: A Claims-Processing Target
A hypothetical insurer sets the objective of processing at least 98% of claims within two business days during a quarter. It expects 1,000 claims. For this illustration, there are two exhaustive scenarios: no processing-platform outage, with probability 0.90, and an outage, with probability 0.10. Assume there are no other changes affecting processing. Without an outage, 990 claims meet the time target; with an outage, 940 do. Find the probability that the objective is attained and the expected percentage processed on time. The method is scenario-by-scenario comparison with the objective threshold.
Step 1: Convert the target to a count. The insurer must process at least \(0.98 \times 1{,}000 = 980\) claims on time.
Step 2: Evaluate each scenario. With no outage, \(990/1{,}000 = 0.99\), or 99%, so the objective is attained. With an outage, \(940/1{,}000 = 0.94\), or 94%, so it is not attained.
Step 3: Calculate attainment probability. Only the no-outage scenario meets the target, so \(P(\text{attainment}) = 0.90(1) + 0.10(0) = 0.90\).
Step 4: Calculate the expected on-time percentage. The scenario-weighted percentage is \(0.90(99\%) + 0.10(94\%) = 89.1\% + 9.4\% = 98.5\%\).
The objective-attainment probability is 0.90, while the expected on-time percentage is 98.5%. These are different summaries and answer different questions. Check: 98.5% is a weighted average between the scenario results of 94% and 99%, and the 90% attainment probability equals the probability of the only scenario that reaches 98%.
One Event, Several Objectives
An organization can have several objectives that are exposed to the same event. Each objective needs its own measure and threshold: the event may affect one aim materially, another only slightly, and a third not enough to cross its stated boundary. The following hypothetical example uses a single event and a shared scenario model to show why the assessment should be repeated for each objective.
Worked Example: A Power Outage and Three Objectives
A hypothetical insurer assesses a power outage during a quarter. The outage has probability 0.06; no outage has probability 0.94. Assume these are the only two scenarios. The insurer has three objectives: process at least 96% of claims on time, end the day with at least $25 million of available cash, and submit a required report by its deadline. In the no-outage scenario, 98% of claims are on time, available cash is $32 million, and the report is on time. In the outage scenario, 88% of claims are on time, available cash is $27 million, and the report is late. Find each objective’s attainment probability and the probability that all three are attained.
Claims objective. The target is at least 96%. The no-outage outcome of 98% meets it; 88% during an outage does not. Thus \(P(\text{claims objective attained}) = 0.94\).
Cash objective. The target is at least $25 million. Both $32 million and $27 million meet it. Thus \(P(\text{cash objective attained}) = 0.94 + 0.06 = 1.00\). The event changes the cash outcome, but neither scenario crosses this objective’s boundary.
Reporting objective. The report is on time without an outage and late with one. Therefore, \(P(\text{reporting objective attained}) = 0.94\).
All three objectives. All three are attained in the no-outage scenario. The outage scenario fails the claims and reporting objectives, even though it meets the cash objective. Hence \(P(\text{all three attained}) = 0.94\).
The results differ by objective: the outage is associated with a failure to meet the claims and reporting targets, but not the cash threshold. Because the same two scenarios determine all three outcomes, it would be wrong to multiply the three individual attainment probabilities as if they came from separate independent trials. The direct scenario check gives 0.94. Check: the joint result cannot exceed any individual attainment probability, and here it equals the claims and reporting probabilities.
The Same Event Can Matter Differently Across Organizations
Objective-relative assessment also prevents a misleading assumption that an event has a fixed level of importance for every organization. Even when two organizations state the same objective and face the same event probability, their starting positions and possible outcomes may differ. The objective supplies the comparison point; the scenario outcomes show whether that point is reached.
Worked Example: A Flood and a Capital Threshold
Two hypothetical insurers each set the objective of maintaining at least $40 million of available capital at quarter-end. For each insurer, a regional flood has probability 0.10 and no flood has probability 0.90; these two scenarios are exhaustive. Insurer A has $60 million after a no-flood quarter and $45 million after a flood. Insurer B has $48 million after a no-flood quarter and $35 million after a flood. Assume the figures already reflect all effects relevant to this objective. Calculate each insurer’s probability of attaining the capital objective.
Insurer A. Both $60 million and $45 million meet the $40 million threshold. Its attainment probability is \(0.90 + 0.10 = 1.00\).
Insurer B. The no-flood outcome of $48 million meets the threshold; the flood outcome of $35 million does not. Its attainment probability is \(0.90(1) + 0.10(0) = 0.90\).
The event probability and stated objective are the same for both insurers, but their scenario outcomes relative to the threshold differ. The conclusion is not that the flood has no possible effect on Insurer A; rather, under these stated assumptions, it does not prevent A from meeting this particular objective. Check: B’s attainment probability is exactly the probability of the no-flood scenario, while A meets the objective in both scenarios.
Common Mistakes and a Reliable Check
A common error is to treat a named event as a complete risk statement: “the risk is a power outage.” That identifies an uncertain occurrence but not what organizational objective could be affected or how. Another error is to use an average outcome as proof that a threshold is met with certainty.
In the claims example, a mistaken conclusion would be: “The expected on-time percentage is 98.5%, which is above the 98% target, so the objective is attained.” This compares the target with an average and then treats that comparison as a certain result. The correction is to distinguish the two questions. The expected percentage is 98.5%, but the objective is attained in only the no-outage scenario, so its attainment probability is 0.90. A target applied to each realized quarter is not automatically satisfied because an average across possible quarters exceeds it.
Before finalizing an assessment, check that the objective is specific enough to test, the scenarios cover the uncertainty being considered, and each outcome is compared with the correct objective. If one event appears in several objective statements, assess each separately rather than assuming that all objectives respond in the same way.
Check Your Understanding
For each problem, compare the stated scenario outcomes with the objective before calculating an attainment probability.
- A hypothetical service provider aims to complete at least 95% of requests within one day. With probability 0.80, 96% are completed on time; with probability 0.20, 90% are. What is the probability of attaining the objective, and what is the expected completion percentage? (Answer: Attainment probability 0.8000; expected completion percentage 94.8%.)
- A hypothetical insurer’s objective is to maintain at least $50 million in available funds at month-end. A disruption has probability 0.05. Funds are $62 million without the disruption and $49 million with it. Find the probability of attaining the objective. (Answer: 0.9500.)
- A hypothetical organization has two objectives: keep at least 97% of transactions on time and retain at least $20 million in cash. A system failure has probability 0.08; without failure, the results are 99% on time and $24 million cash; with failure, they are 94% on time and $21 million cash. What are the separate attainment probabilities, and what is the probability both objectives are attained? (Answer: Transactions 0.9200; cash 1.0000; both 0.9200.)
- A hypothetical insurer has a capital objective of at least $30 million after a quarter. A storm has probability 0.12; capital is $42 million without a storm and $28 million with one. Calculate the attainment probability and the expected capital amount. (Answer: Attainment probability 0.8800; expected capital $40.32 million.)
- Two hypothetical organizations share the objective of keeping at least 90% of scheduled services available during a period. An equipment event has probability 0.15 for each. Organization A’s availability is 96% without the event and 92% with it; Organization B’s is 95% without the event and 85% with it. Find each organization’s probability of attaining the objective. (Answer: Organization A 1.0000; Organization B 0.8500.)