Skip to content
FTRA
Insights

Business planning

A Practical Starting Point for Small Business Risk Planning

An educational guide to identifying critical risks, prioritising actions and reviewing progress every quarter.

For general education only. Any example is fictional, and this article is not legal, insurance or financial advice.

Start small and stay practical

Risk planning does not need to be complex to be useful. For a small or growing business, a short list of the most important risks, with clear actions, is more valuable than a long register that nobody maintains.

The example below is fictional and for illustration only. Imagine a small courier business with a handful of vans and one main customer.

Step 1: Identify what could stop the business

Ask what would most seriously affect your ability to operate, serve customers or get paid. For the fictional courier business, that might include:

  • Losing the main customer, which provides most of the revenue.
  • A serious road incident involving a driver or vehicle.
  • Cash-flow pressure from late customer payments.
  • Vehicles off the road for repairs with no backup.

Step 2: Prioritise

Rate each risk simply — for example high, medium or low for likelihood and impact — and focus first on the ones that are both likely and severe. Be honest about where the business is most exposed.

Step 3: Agree specific actions

For each priority risk, agree one or two realistic actions, an owner and a date. In the fictional example, that could mean actively seeking a second customer, agreeing payment terms in writing, and arranging a standby vehicle option.

Step 4: Review every quarter

Put a quarterly review in the diary. Check whether actions were completed, whether the risks have changed and whether new ones have appeared — for example after winning a new contract or adding vehicles.

Keep it proportionate

A simple plan that is used beats a perfect plan that is not. As the business grows, the plan can grow with it into a fuller risk register with formal ratings, controls and review dates.

More insights