<img src="https://ws.zoominfo.com/pixel/pIUYSip8PKsGpxhxzC1V" width="1" height="1" style="display: none;">

Risk Mitigation

author Ncontracts
1 min read
Nov 12, 2018

Risk mitigation refers to defined strategies to minimize or avoid exposure to loss. Mitigation means reducing the seriousness or severity of the loss. The loss involved is usually either directly or indirectly a financial loss.

An example of an indirect financial loss is a reputation risk that could cause a company to lose business and suffer financially. A lawsuit that results in a judgment against the company would be a more direct financial loss.

Strategies for mitigating risk include: accepting the risk, avoiding the risk, limiting the risk, and transferring the risk to another company. If the company decides to accept a risk, it takes its chances. Acceptance is usually the choice when the risk is only slight or the cost of mitigating it is too high.

Related: How Not to Use Test Results: A $613 Million Enforcement Action Story

Avoiding risks would be the ideal risk mitigation strategy if not for its cost. However, avoidance is sometimes worth its expenses, especially if the risk could cause the business to fail. In most cases, companies try to limit their risks. For example, a company might reduce the risk of cyber attacks with firewalls and other security systems for their computers. These measures are called controls. Controls include all the systems, procedures, processes and policies put in place to protect the bank’s assets, control risks, and align with the bank’s strategic plans. 

Risk transference means putting the risk in the hands of another company. Transference may be the best option for specific operations that are not a part of certain companies’ primary services.  However, transference is not a viable option in the banking industry. The reason is that regulators do not differentiate between the financial institution and the vendors they use for outsourced functions. The bank is always ultimately responsible for the actions of the vendor. 

A risk mitigation plan may include any or all of these strategies, each used for different types of risks. Every company needs to have a risk mitigation plan in place and update it as needed. Risk mitigation is essential for keeping a company in business and allowing it to thrive.

Learn more about healthcare risk management and risk management.

 

Related: Creating Reliable Risk Assessments

Subscribe to the Nsight Blog

All Topics Risk & Compliance Product Insight Banks Lending Compliance Credit Unions Risk Management Fair Lending Nfairlending Cluster: Risk Management Compliance Lending Compliance Management Integrated Risk Blog Regulatory Compliance Management Nrisk News & Updates HMDA Risk Mortgage Lenders Vendor Management Ncomply CRA Business Resiliency Lending Compliance Blog Vendor CFPB Ncontinuity Business Continuity Third-Party Vendor Management Cybersecurity Fintech NVendor Strategic Planning Ncyber Regulatory Updates Ntransmittal Audits & Findings OCC Regulatory Compliance Company Culture Audit Nverify Compliance Management Exams FDIC Nfindings Findings NCUA Contract Management Employee Intranet Business Continuity Management Contract FRB Findings Management Enterprise Risk Management FFIEC Ncontracts manager Third-Party Vendors Vendor Risk Vendor Risk Management Wealth Management 1071 ABA Bank Access Control Artificial Intelligence Audit Findings Board Portal Call Report Compliance Risk Cybersecurity Assessment Digital Tansformation Due Diligence Efficiency Employee Engagement Exam findings FIEC Governance and Risk Management Inc. 5000 Internal Audit Management Nboardportal Verify integrated risk management
Mitigation Definition
Risk Management

Mitigation Definition

Nov 12, 2018 1 min read
Risk Management Planning
Risk Management

Risk Management Planning

Oct 31, 2018 1 min read
Risk Management In Healthcare
Risk Management

Risk Management In Healthcare

Oct 31, 2018 2 min read