Risk Avoidance, Retention and Reduction

Why This Topic Matters

Risk management is a core domain of the BCSP Certified Safety Professional (CSP) examination, and the risk treatment options of avoidance, retention, and reduction (together with transfer) form the backbone of how safety professionals decide what to do about identified hazards. Once a risk has been identified and assessed (likelihood x severity), the next question is always: what do we do about it? The answer falls into one of these treatment categories.

The CSP exam tests this material because real-world safety leaders must justify decisions to management in terms of risk and cost, not just compliance. A CSP must be able to recommend whether an organization should eliminate an activity entirely, accept a residual risk, implement controls to lower it, or shift the financial burden through insurance or contracts. Understanding these options also ties directly to ANSI/ASSP Z590.3 (Prevention through Design), ANSI/ASSP Z10, ISO 31000, and ISO 45001, all of which appear in the CSP blueprint.

What It Is: The Four Risk Treatment Strategies

Risk treatment (sometimes called risk response or risk handling) is the process of selecting and implementing measures to modify risk. The classic framework uses four strategies, often remembered by the acronym ARRT (Avoid, Reduce, Retain, Transfer) or the "4 Ts" (Terminate, Treat, Tolerate, Transfer).

1. Risk Avoidance
Risk avoidance means deciding not to engage in, or to withdraw from, the activity that creates the risk. The hazard is eliminated because the exposure no longer exists. Examples include:
- Discontinuing the use of a highly toxic solvent entirely rather than controlling exposure to it.
- Choosing not to enter a new product line that requires confined-space entry.
- Cancelling a project in a politically unstable region.
- Outsourcing is not avoidance; it is usually transfer. True avoidance means the risk ceases to exist for the organization.

Key point: Avoidance is the most effective treatment because it removes the risk completely, but it also eliminates any benefit the activity would have produced. It is not always feasible because the activity may be essential to the business.

2. Risk Retention (Risk Acceptance / Assumption)
Risk retention means the organization knowingly or unknowingly keeps the risk and absorbs any resulting losses. There are two forms:
- Active (planned) retention: A conscious decision to accept the risk, often because the risk is low, the cost of treatment exceeds the expected loss, or the organization self-insures (sets aside funds or uses deductibles). Example: paying a $25,000 deductible on a property policy rather than purchasing first-dollar coverage.
- Passive (unplanned) retention: Risk is retained because it was never identified or was underestimated. This is the dangerous form and is a sign of a weak risk management program.

Retention is appropriate when residual risk is at an acceptable level (often documented as ALARP: As Low As Reasonably Practicable) or when the loss is small and predictable enough to budget for. Retention always requires management sign-off and documentation.

3. Risk Reduction (Risk Mitigation / Loss Control)
Risk reduction means taking action to lower the probability of a loss event, the severity of its consequences, or both, while continuing the activity. This is where most day-to-day safety work lives. Reduction is subdivided into:
- Loss prevention: Measures that reduce the frequency or likelihood of a loss (e.g., machine guarding, training, preventive maintenance, lockout/tagout).
- Loss reduction / loss control: Measures that reduce the severity once an event occurs (e.g., sprinklers, emergency response plans, PPE, first aid, spill containment).
- Segregation / separation and duplication: Spreading exposures (separating inventory into multiple warehouses) or keeping backups (redundant systems) so a single event cannot cause total loss.

Reduction is implemented through the Hierarchy of Controls: elimination, substitution, engineering controls, administrative controls, and PPE. Note that elimination at the top of the hierarchy is effectively avoidance of a specific hazard, while the remaining levels are reduction strategies.

4. Risk Transfer (for context)
Although the slug focuses on avoidance, retention, and reduction, you must understand transfer to distinguish it on the exam. Transfer shifts the financial consequences (not the hazard itself) to a third party through insurance, hold-harmless agreements, indemnification clauses, or contracting out the work. The organization still bears legal and moral responsibility for the safety of workers on its site.

How It Works: Selecting the Right Strategy

The selection process follows the risk assessment:

1. Identify the hazard and exposure.
2. Analyze likelihood and severity to produce a risk score (often on a risk matrix).
3. Evaluate against the organization's risk criteria or tolerance.
4. Treat by choosing a strategy:
- High probability + High severity: Avoid (or reduce dramatically if the activity cannot be stopped).
- Low probability + High severity: Transfer (insurance) combined with reduction (e.g., sprinklers for a fire).
- High probability + Low severity: Reduce through loss prevention, and retain the remainder (self-insure small frequent losses).
- Low probability + Low severity: Retain.
5. Monitor residual risk and review periodically.

Most real-world decisions combine strategies. For example, a company might reduce fall hazards with guardrails (reduction), buy workers' compensation insurance (transfer), and accept the residual risk of a worker tripping on a level surface (retention). The CSP exam frequently asks you to identify the primary or best strategy given a scenario.

Cost-Benefit Considerations
The CSP blueprint expects you to weigh cost of control against expected loss. Expected loss = probability x severity (often expressed in dollars per year). If a control costing $10,000 per year prevents an expected annual loss of $50,000, reduction is justified. If a control costs more than the loss it prevents and the risk is within tolerance, retention may be the rational choice. Avoidance is justified when the risk is intolerable regardless of cost or when the activity's benefit is marginal.

Common Terminology You Must Recognize
- Inherent risk: Risk before any controls.
- Residual risk: Risk remaining after controls are applied.
- Risk appetite / tolerance: How much risk the organization is willing to accept.
- ALARP / SFAIRP: As Low As Reasonably Practicable / So Far As Is Reasonably Practicable.
- Self-insurance, deductible, captive insurer: Forms of planned retention.
- Hold-harmless, indemnification, waiver: Contractual (non-insurance) transfer.
- Loss prevention vs. loss reduction: Frequency vs. severity.

Exam Tips: Answering Questions on Risk Avoidance, Retention and Reduction

Tip 1: Decide whether the activity continues. If the scenario eliminates the activity or hazard entirely, the answer is avoidance. If the activity continues with controls, it is reduction. If the activity continues and nothing is done but the risk is accepted, it is retention. If the financial consequence shifts to someone else, it is transfer.

Tip 2: Insurance is always transfer, deductibles are always retention. A question describing a high deductible, self-insured retention, or captive insurance company is testing retention, even though an insurance policy is involved. The portion the company pays itself is retained.

Tip 3: Distinguish loss prevention from loss reduction. Both fall under risk reduction, but the exam may ask which one a sprinkler system represents. Sprinklers do not stop fires from starting (prevention); they limit damage once a fire exists (reduction/severity). Machine guarding, training, and inspections are prevention (frequency).

Tip 4: Elimination at the top of the hierarchy of controls equals avoidance. If asked for the most effective risk treatment or the top of the hierarchy, select elimination/avoidance. If asked for the least effective, select PPE (a reduction method addressing severity at the worker level).

Tip 5: Watch for "unknowingly" or "not identified." These phrases signal passive retention, which the exam treats as a program failure. Planned, documented acceptance is active retention and is legitimate.

Tip 6: Contracting out is transfer, not avoidance. The hazard still exists on your site and you retain host-employer obligations under OSHA's multi-employer worksite doctrine. Only choose avoidance if the organization stops doing the activity altogether.

Tip 7: Use the risk matrix logic for "best strategy" questions. Low-frequency/high-severity exposures point to transfer plus reduction; high-frequency/low-severity exposures point to reduction plus retention; catastrophic and likely exposures point to avoidance.

Tip 8: Apply cost-benefit when numbers are given. Compute expected annual loss (probability x cost per event x events per year) and compare it to the cost of control. If control cost exceeds expected loss and risk is within tolerance, retention is the defensible answer. If control cost is lower, reduction is correct.

Tip 9: Read for the "primary" or "most appropriate" qualifier. Many scenarios mix strategies. Identify the dominant action described in the stem and match it to a single category rather than being distracted by secondary details.

Tip 10: Know that avoidance has a downside. If a question asks about the disadvantage of avoidance, the answer is loss of the benefit, revenue, or opportunity associated with the avoided activity. Avoidance is not "free."

Practice Scenario Walkthrough

Scenario: A manufacturer uses a flammable degreasing solvent. After a risk assessment, management replaces the solvent with an aqueous cleaner, installs local exhaust ventilation on the remaining processes, purchases property insurance with a $50,000 deductible, and documents that the remaining slip hazard from wet floors is acceptable with existing anti-slip mats.

Analysis: Replacing the flammable solvent removes the fire exposure from that process: avoidance (elimination/substitution at the top of the hierarchy). Local exhaust ventilation lowers exposure probability: reduction (loss prevention). Property insurance: transfer. The $50,000 deductible: active retention. Accepting the residual slip hazard with documentation: active retention with prior reduction (mats). If the exam asks which action represents avoidance, the correct answer is the solvent substitution.

Summary

Risk avoidance eliminates the exposure by not performing the activity; risk reduction lowers frequency or severity while continuing the activity; risk retention accepts the remaining risk either deliberately (planned) or by default (unplanned); and risk transfer shifts financial consequences to another party. On the CSP exam, success depends on reading each scenario carefully, determining whether the activity continues, who bears the financial loss, and whether the action targets frequency or severity. Master these distinctions and the terminology around them, and risk treatment questions become some of the most predictable points you can earn.