Study guide
C.17.1 Risk Management Process
Certified Financial Planner CFP
Track your progress as you read
Finished sections get a check mark.
1 A. Professional Conduct and Regulation
A.1 Code of Ethics and Standards of Conduct A.1.1 The Six Ethical Principles A.2 Procedural Rules and Discipline A.2.1 Fitness Standards for Candidates A.3 Financial Institutions Overview A.3.1 Broker-Dealers vs. RIAs A.4 SEC and Securities Regulation A.4.1 FINRA and Broker-Dealer Regulation A.4.2 State Securities Regulation A.5 Consumer Protection Laws A.5.1 Privacy and Confidentiality Requirements A.6 Fiduciary Duty and Application
2 B. General Principles of Financial Planning
B.7 The Financial Planning Process B.7.1 Establishing the Client Relationship B.7.2 Gathering Client Data and Goals B.8 Personal Financial Statements B.8.1 Key Financial Ratios B.9 Cash Flow Management B.9.1 Emergency Fund Planning B.10 Debt Management Strategies B.10.1 Mortgage and Home Financing B.11 Economic Concepts B.11.1 Planning for Inflation B.12 Time Value of Money Concepts B.12.1 TVM Calculations and Applications B.12.2 Loan Amortization B.13 Education Needs Analysis B.14 Education Savings Vehicles B.14.1 529 Plans In-Depth B.15 Education Funding Strategies B.16 Gift/Income Tax Strategies
3 C. Risk Management and Insurance Planning
C.17 Principles of Risk and Insurance C.17.1 Risk Management Process C.18 Analysis of Risk Exposures C.19 Health Insurance Fundamentals C.19.1 Types of Health Insurance Plans C.20 Disability Income Insurance C.20.1 Disability Policy Features C.21 Long-Term Care Insurance C.22 Annuities Overview C.22.1 Fixed vs. Variable Annuities C.23 Life Insurance Fundamentals C.23.1 Types of Life Insurance C.24 Business Owner Insurance Solutions C.25 Insurance Needs Analysis C.26 Insurance Policy and Company Selection
4 D. Investment Planning
D.27 Equity Securities D.27.1 Fixed Income Securities D.27.2 Mutual Funds and ETFs D.27.3 Taxation of Investment Vehicles D.28 Systematic Risk D.28.1 Unsystematic Risk D.29 Economic and Market Cycles D.30 Measures of Risk and Return D.30.1 Investment Performance Measures D.31 Asset Allocation Strategies D.31.1 Portfolio Diversification D.32 Bond and Stock Valuation D.32.1 Stock Valuation Models D.33 Investment Policy Statement D.33.1 Modern Portfolio Theory D.34 Active vs. Passive Investing D.34.1 Common Investment Strategies D.35 Alternative Investments D.35.1 Options and Derivatives
5 E. Tax Planning
E.36 Income Tax Fundamentals E.36.1 Filing Status and Tax Brackets E.37 Types of Income E.37.1 Deductions and Credits E.37.2 Capital Gains and Losses E.38 Business Entity Taxation E.38.1 Self-Employment Tax E.39 Taxation of Trusts and Estates E.40 Tax Reduction Strategies E.40.1 Retirement Account Tax Strategies E.41 Property Transactions E.41.1 Basis Rules for Acquired Property E.42 AMT and NIIT E.42.1 Special Tax Situations E.43 Charitable Giving Strategies
6 F. Retirement Savings and Income Planning
F.44 Retirement Needs Analysis F.44.1 Sources of Retirement Income F.45 Social Security Benefits F.45.1 Social Security Claiming Strategies F.45.2 Medicare Planning F.46 Eldercare and Special Needs Planning F.47 Qualified Plan Overview F.47.1 Defined Benefit Pension Plans F.47.2 Defined Contribution Plans F.48 Eligibility and Vesting F.48.1 Coverage and Discrimination Testing F.48.2 Contribution and Benefit Limits F.48.3 401(k) Plan Features F.49 Non-Qualified Deferred Compensation F.49.1 Executive Compensation Plans F.50 Retirement Plan Selection for Businesses F.50.1 Individual Retirement Accounts F.51 Distribution Rules F.51.1 Required Minimum Distributions F.52 Retirement Income Strategies F.52.1 Tax-Efficient Withdrawal Strategies F.53 Business Succession Planning
7 G. Estate Planning
G.54 Property Titling and Beneficiary Designations G.54.1 Beneficiary Designations G.55 Strategies to Transfer Property G.55.1 Lifetime Gifting Strategies G.56 Wills and Estate Documents G.56.1 Powers of Attorney G.56.2 Advance Directives and Healthcare Documents G.57 Federal Gift Tax G.57.1 Federal Estate Tax G.57.2 Generation-Skipping Transfer Tax G.58 Sources for Estate Liquidity G.58.1 Life Insurance for Estate Liquidity G.59 Trust Fundamentals G.59.1 Revocable Living Trusts G.59.2 Irrevocable Trusts G.59.3 Trust Income Taxation G.60 Marital Deduction Planning G.60.1 QTIP Trusts G.60.2 Portability of Estate Tax Exemption G.61 Intra-family and Business Transfer Techniques G.61.1 Family Limited Partnerships G.61.2 GRATs and IDGTs G.62 Postmortem Estate Planning Techniques G.62.1 Disclaimer Planning G.62.2 Estate Tax Elections G.63 Planning for Divorce and Unmarried Couples G.63.1 Estate Planning for Unmarried Couples G.63.2 Planning for Blended Families G.64 Planning for Special Needs and Circumstances G.64.1 Special Needs Trusts G.64.2 ABLE Accounts
8 H. Psychology of Financial Planning
H.65 Client and Planner Attitudes, Values, Biases H.65.1 Money Scripts and Money Attitudes H.65.2 Planner Self-Awareness H.66 Behavioral Finance H.66.1 Cognitive Biases H.66.2 Emotional Biases H.66.3 Heuristics and Mental Accounting H.67 Sources of Money Conflict H.67.1 Couples and Money Conflict H.67.2 Family and Intergenerational Money Conflict H.68 Principles of Counseling H.68.1 Therapeutic Techniques in Financial Planning H.68.2 Professional Boundaries and Referrals H.69 General Principles of Effective Communication H.69.1 Listening and Questioning Skills H.69.2 Managing Difficult Conversations H.69.3 Non-Verbal Communication H.70 Crisis Events with Severe Consequences H.70.1 Death and Divorce H.70.2 Job Loss and Health Crisis H.70.3 Sudden Wealth and Sudden Loss H.70.4 Natural Disasters and Traumatic Events
C.17.1 Risk Management Process
Key Takeaways Explain This Topic AI
The risk management process follows five steps: identify, evaluate, select technique, implement, and monitor
The STARR method provides five risk management techniques: Share, Transfer, Avoidance, Reduction, and Retention
High-severity, low-frequency risks are best managed through insurance (risk transfer)
High-severity, high-frequency risks should be avoided entirely
Low-severity risks can often be retained (self-insured) to save on premium costs
- Risk management is continuous—plans must be monitored and updated as circumstances change
- Last updated: January 2026
Risk Management Process
Effective risk management follows a systematic process that helps financial planners and their clients identify, evaluate, and address potential risks. The CFP exam tests your understanding of this process and your ability to recommend appropriate risk management strategies based on the characteristics of different risks.
The Five-Step Risk Management Process
The risk management process consists of five interconnected steps. Each step builds on the previous one, creating a comprehensive approach to protecting clients from financial loss.
Step 1: Identify Risks and Exposures
The first step involves identifying all potential risks that could cause financial harm to the client. This requires a thorough analysis of the client's personal and financial situation.
Categories of personal risk exposures:
Risk Category Examples Potential Impact
Personal/Health Death, disability, critical illness, long-term care needs Loss of income, medical expenses, care costs
- Property Home damage, auto accidents, theft, natural disasters Repair/replacement costs, loss of assets
- Liability Negligence claims, professional errors, auto accidents Legal costs, judgments, asset depletion
- Income Job loss, business failure, economic downturns Reduced cash flow, inability to meet obligations
Key questions for risk identification:
What assets does the client own that could be damaged or destroyed?
What income sources could be interrupted?
Who depends on the client financially?
What activities create liability exposure?
What contractual obligations create risk?
Step 2: Evaluate Risk Severity and Frequency
After identifying risks, the next step is to evaluate each risk based on two critical factors:
Frequency (Probability) : How likely is the risk to occur?
- High frequency: Likely to happen regularly
- Low frequency: Unlikely to occur or happens rarely
Severity (Impact) : How significant is the potential financial loss?
- High severity: Could cause significant financial hardship or ruin
- Low severity: Would cause minor inconvenience or manageable expense
This analysis creates a risk matrix that guides the selection of appropriate risk management techniques:
- High Frequency Low Frequency
- High Severity AVOID TRANSFER (Insurance)
- Low Severity REDUCE/RETAIN RETAIN
- Exam Tip: The Risk Matrix
This frequency-severity matrix is heavily tested on the CFP exam. Memorize it! When presented with a risk scenario, first classify the risk by frequency and severity, then select the appropriate technique from the matrix.
Examples by quadrant:
- High Severity/High Frequency : Operating a business with known safety hazards -> AVOID
- High Severity/Low Frequency : Death of the primary wage earner -> INSURANCE
- Low Severity/High Frequency : Minor car scratches and dings -> RETENTION/REDUCTION
- Low Severity/Low Frequency : Losing a $20 bill -> RETENTION
- Step 3: Select Risk Management Technique
Based on the frequency and severity evaluation, select the most appropriate risk management technique. The STARR method provides a framework for this decision.
The STARR Method
STARR is an acronym representing five risk management techniques. Each technique is appropriate for different types of risks based on their frequency and severity characteristics.
S - Share
Risk sharing means dividing the financial burden of a potential loss between the individual and another party (typically an insurance company).
How it works:
- The client purchases insurance but retains a portion of the risk through deductibles and coinsurance
- Higher deductibles mean more risk sharing by the client
- Lower premiums result from the client assuming more risk
Example : A client needs $500,000 of liability protection. They purchase a policy with a $5,000 deductible, sharing the first $5,000 of any loss with the insurer.
When to use : Appropriate for moderate-severity risks where the client can afford to absorb smaller losses to reduce premium costs.
T - Transfer
Risk transfer shifts the entire financial burden of a potential loss to another party, typically through insurance.
How it works:
- Client pays premiums to an insurance company
- Insurance company assumes responsibility for covered losses
- Most comprehensive form of protection
Example : A client purchases a $1 million umbrella liability policy. If a lawsuit results in a $750,000 judgment, the insurance company pays the entire amount (above underlying coverage limits).
When to use : Best for high-severity, low-frequency risks where a loss could be financially catastrophic. This is the primary purpose of insurance.
Types of risk transfer:
- Method Description Example
- Insurance Contractual transfer to insurer Life, health, property, liability policies
- Hold-harmless agreements Contractual shift to another party Construction contracts, rental agreements
- Hedging Financial instruments to offset risk Futures, options (for speculative risks)
- A - Avoidance
Risk avoidance eliminates the risk entirely by not engaging in the activity that creates the exposure.
How it works:
- The client chooses not to participate in risky activities
- Eliminates both the risk and the potential benefits of the activity
Examples:
- Not owning a swimming pool to avoid drowning liability
- Not driving to avoid auto accidents
- Not investing in volatile securities to avoid market losses
When to use : Best for high-severity, high-frequency risks where the potential loss is too great and too likely. Also appropriate when the cost of insurance is prohibitive or coverage is unavailable.
Limitations : Avoidance may not be practical for many risks (you cannot avoid the risk of death), and avoiding all risk means missing opportunities.
R - Reduction
Risk reduction (also called loss control) involves taking steps to decrease either the frequency or the severity of potential losses.
How it works:
- Loss prevention : Reduces the likelihood of a loss occurring
- Loss minimization : Reduces the severity if a loss does occur
Examples:
- Type Action Effect
- Loss Prevention Installing smoke detectors Reduces fire frequency
- Loss Prevention Regular exercise and health screenings Reduces illness frequency
- Loss Prevention Defensive driving courses Reduces accident frequency
- Loss Minimization Installing sprinkler systems Reduces fire damage severity
- Loss Minimization Wearing seatbelts Reduces injury severity
- Loss Minimization Emergency savings fund Reduces financial impact
When to use : Appropriate for risks that cannot be avoided or fully transferred. Risk reduction often works alongside other techniques—for example, reducing risk to qualify for lower insurance premiums.
R - Retention
Risk retention (also called self-insurance) means the client accepts responsibility for the financial consequences of a potential loss.
How it works:
- Client does not purchase insurance for the risk
- Client pays for losses out of pocket when they occur
- May be intentional (deliberate choice) or unintentional (failure to identify risk)
Examples:
- Choosing a high deductible on insurance policies
- Not purchasing collision coverage on an old car
- Self-insuring for small health expenses through an HSA
- Setting aside emergency funds for unexpected expenses
When to use : Best for low-severity risks where the potential loss is manageable and the cost of insurance would exceed the expected loss over time.
Requirements for successful retention:
- Sufficient emergency funds or cash reserves
- Multiple small risks (similar to how insurers spread risk)
- Clear understanding of maximum potential loss
- STARR Method Summary Table
- Technique Definition Best For Example
- Share Divide risk with insurer Moderate risks; cost management High-deductible health plan
- Transfer Shift entire risk to insurer High severity, low frequency Life insurance, umbrella policy
- Avoidance Eliminate the risk entirely High severity, high frequency Not owning dangerous property
Reduction Decrease frequency or severity All risks; works with other techniques Smoke detectors, healthy lifestyle
- Retention Accept and self-insure Low severity risks Emergency fund, high deductibles
- Step 4: Implement the Risk Management Plan
After selecting appropriate techniques, the plan must be implemented. This involves:
For insurance-based solutions:
- Selecting appropriate policy types and coverage limits
- Choosing appropriate deductibles and coinsurance levels
- Comparing policies and insurers
- Completing applications and underwriting
- Paying premiums and maintaining coverage
For non-insurance solutions:
- Establishing emergency funds
- Implementing loss prevention measures
- Drafting legal agreements (for contractual transfer)
- Modifying behavior (for avoidance)
Implementation considerations:
- Coordinate coverage to avoid gaps and overlaps
- Balance premium costs against protection needs
- Ensure client understands policy provisions and exclusions
- Maintain proper documentation
- Step 5: Monitor and Review
Risk management is not a one-time event. The final step involves ongoing monitoring and periodic review to ensure the plan remains appropriate.
When to review:
- Major life events (marriage, divorce, birth of children)
- Changes in income or assets
- Purchase of significant property
- New business ventures or career changes
- Policy renewals
- Changes in laws or regulations
What to review:
Coverage adequacy—do limits still match exposure?
Premium competitiveness—are rates still reasonable?
Policy provisions—do terms still meet needs?
New risks—have any new exposures emerged?
Eliminated risks—are any coverages no longer needed?
- Review Trigger Action Items
- Annual review Compare coverage to current needs, check for better rates
- Life event Adjust beneficiaries, coverage amounts, new policies
- Asset acquisition Add coverage, update limits, review liability exposure
- Claim experience Evaluate if risk reduction measures are needed
- Practical Application: Risk Management Matrix
When evaluating a client's risks, use this decision matrix to select the appropriate STARR technique:
Risk Characteristic Recommended Technique Rationale
High severity + Low frequency Transfer (Insurance) Financial impact too great to self-insure; infrequent enough to be affordable
- High severity + High frequency Avoid Too expensive to insure; too dangerous to accept
- Low severity + High frequency Reduce or Retain Manage through prevention and self-insurance
- Low severity + Low frequency Retain Not cost-effective to insure; manageable if occurs
- Exam Tip: Application Questions
The CFP exam presents scenarios requiring you to recommend the best risk management technique. Follow this process:
- Classify the risk (pure vs. speculative)
- Assess frequency (how likely?)
- Assess severity (how bad?)
- Match to the appropriate STARR technique using the matrix
- Consider the client's financial resources and risk tolerance
Example scenario : A 16-year-old's parent buys her a 1970 VW Bug worth $1,000. What is the best way to manage the risk of collision damage?
Analysis : This is a pure risk (only loss or no loss possible). The frequency of minor accidents for teenage drivers is relatively high. The severity is low ($1,000 maximum loss). Using the matrix: Low severity + potentially high frequency = Retention . The parent should retain this risk rather than pay collision premiums that might exceed the car's value.
Key Terms Summary
- Term Definition
- Risk Identification Process of discovering potential sources of financial loss
- Risk Evaluation Assessing the frequency and severity of identified risks
- Frequency How likely a risk is to occur (probability)
- Severity The financial impact if a risk occurs (magnitude)
- Risk Transfer Shifting financial responsibility to another party
- Risk Avoidance Eliminating exposure by not engaging in risky activity
- Risk Reduction Decreasing the likelihood or impact of losses
- Risk Retention Accepting and self-insuring potential losses
- Loss Prevention Actions that reduce the probability of loss
- Loss Minimization Actions that reduce the severity of loss