What it means
Everyday language treats risk as purely bad, but finance treats it as spread: the range of results that could realistically occur around your central forecast. A business whose profit could land anywhere between a $2,000,000 loss and a $6,000,000 gain is riskier than one whose profit will land between $1,800,000 and $2,200,000, even though the first has the higher best case.
Risk matters because it has a price. Investors, lenders and insurers all charge more when outcomes are less predictable, so two projects with identical expected profits are not worth the same amount if one of them is far more uncertain than the other.
The practical building blocks are likelihood and impact. Likelihood is the probability an event occurs in a given period, impact is what it costs or earns if it does, and multiplying the two gives an expected value that lets very different exposures be compared on one scale.
Finance people usually split risk into categories so it can be owned and managed. Common groupings include market risk, credit risk, liquidity risk, operational risk and strategic risk, and most real problems sit in more than one category at once.
An important nuance is the difference between risk and uncertainty. Risk describes situations where the possible outcomes and rough probabilities can be estimated, while genuine uncertainty describes situations where you cannot even list the outcomes, and pretending the second is the first is how models produce false comfort.
In practice
Real-world examples.
Example
A restaurant group signs a two-year lease with rent fixed in advance. That removes the risk of rent rising but creates the risk of being locked into an expensive site if the neighbourhood declines, so the group has swapped one exposure for another rather than eliminating risk.
Example
A software company earns 45% of revenue from a single client. Even though the client has always paid on time, the concentration means a single non-renewal would wipe out nearly half of income, which is why lenders apply a discount when valuing the business.
Example
An importer buys goods priced in euros and sells them in dollars. Between order and payment the exchange rate can move either way, so the finance team quantifies the exposure each month and hedges the portion that would breach the profit target if rates moved 5% against them.
Formula
Calculation
The core quantitative tool is expected value, which weights each possible result by its probability.
Expected value = Sum of (Probability of each outcome x Value of that outcome)
A manufacturer is considering a new production line. Its planning team sets out three scenarios: a strong market giving a $600,000 gain with a 25% chance, a moderate market giving a $250,000 gain with a 55% chance, and a weak market giving a $150,000 loss with a 20% chance. The probabilities add to 100%, as they must.
Strong: 0.25 x $600,000 = $150,000
Moderate: 0.55 x $250,000 = $137,500
Weak: 0.20 x -$150,000 = -$30,000
Expected value = $150,000 + $137,500 - $30,000 = $257,500
The expected value is positive at $257,500, but note that no single scenario produces exactly that number, and there is a one-in-five chance the line loses money. Expected value tells you the average, not the experience.Case study
Seen in the real world.
Northvale Bakery Group is a fictional company created purely to illustrate this concept. Northvale runs eighteen shops and has always described itself as low risk because it sells an everyday product with steady demand. Its board reviews revenue forecasts each quarter but never lists what could go wrong.
A new finance director asks the leadership team to score their five largest exposures by likelihood and impact. The exercise reveals that a single flour supplier serves all eighteen shops, that a supply failure is judged 15% likely in any year, and that the impact would be roughly $1,200,000 in lost trade and emergency sourcing. The expected annual cost of that one exposure is 0.15 x $1,200,000, or $180,000.
Northvale qualifies a second supplier at an extra ingredient cost of about $40,000 a year and cuts the likelihood to an estimated 4%. The residual expected cost falls to 0.04 x $1,200,000, or $48,000, so spending $40,000 removes $132,000 of expected cost. Nothing visible changed in the shops, but the range of possible outcomes narrowed sharply.
Watch out
Common mistakes.
- Treating risk as purely negative and therefore ignoring upside variability, which leads teams to reject projects whose favourable outcomes more than compensate for the downside.
- Confusing a low probability with a safe position when the impact would be fatal, such as a 2% chance of an event that would end the business.
- Managing only the risks that are easy to measure, so financial exposures get careful attention while reputational and key-person exposures go unrecorded.
Questions
People also ask.
How is risk different from a problem?
A problem has already happened and needs fixing, whereas a risk has not happened yet and can still be reduced, transferred, accepted or avoided.
Can a business eliminate risk completely?
No, and trying to usually destroys value, because the actions that remove exposure also remove the returns that come with taking sensible, well-understood bets.
Who should own risk in a company?
The manager closest to the activity should own it day to day, with the board owning the overall appetite and the finance function providing the common language and numbers.
From the founder's library
Take it further with the book.
Build your financial confidence beyond this definition. Shihan's full-length guide, Accounting Fundamentals, takes the same plain-English approach and turns it into a complete, practical playbook for non-finance managers, business owners and students - with chapter-end quiz answers and presentation slides included.
25% off with code MMHQ25, applied at checkout. Priced in USD - checkout may show the equivalent in your local currency.
View the book and save 25%