October 2026

Risk Management International LTD (RMI) is featured in Insurance Business Review in an article highlighting the firm’s approach to identifying insurance coverage gaps and evaluating business exposures. A Closer Look at RMI’s Approach The feature introduces James W. Barber, CEO and Senior Consultant, and describes an advisory process that begins with understanding each client’s operations, organizational structure, and existing insurance arrangements. The publication discusses RMI’s work reviewing policy language, assessing contractual exposures, and examining how insurance programs align with business activities. It also presents client examples illustrating the firm’s approach to coverage reviews and loss-related challenges. These examples describe individual circumstances and should not be interpreted as guarantees of future results. Read the Full Feature Explore the original article for the publication’s account of RMI’s leadership, consulting philosophy, and client work. Read the Risk Management International feature in Insurance Business Review. Connect With RMI To discuss your organization’s risk management priorities, visit the Risk Management International LTD contact page.

A workplace incident raises questions that deserve careful answers. What happened? Which conditions contributed? What changes could address the underlying problem? For businesses in Nassau County, Suffolk County, and throughout New York, incident investigation provides an opportunity to examine workplace exposures and improve how safety concerns are managed. This article explains incident investigation and near-miss reporting using official Occupational Safety and Health Administration resources. It also includes suggested administrative practices and clearly identified hypothetical examples. Risk Management International LTD (RMI) provides risk management consulting, including risk control and prevention services, for organizations reviewing their operational exposures. What Is a Near Miss? OSHA describes near misses, also called close calls, as incidents in which a worker could have been hurt if the circumstances had been slightly different. The absence of an injury does not mean there is nothing to investigate. For example, imagine a hypothetical Long Island storage facility where an object falls from a shelf but does not strike anyone. The investigation would examine the circumstances surrounding the falling object rather than end with the observation that nobody was injured. OSHA strongly encourages employers to investigate both incidents involving worker injuries and close calls. Its guidance emphasizes identifying and correcting underlying causes rather than assigning blame. Source: OSHA — Incident Investigation. Separate Immediate Response From Investigation A suggested written procedure should distinguish the immediate response from the subsequent fact-finding process. Identify who contacts emergency services when needed, who coordinates the response, and who arranges an appropriately qualified investigation. Evidence collection must not interfere with medical assistance or expose additional people to danger. Employees should not enter an unsafe area merely to take photographs or retrieve equipment. Have qualified personnel determine what can be examined safely. For administrative purposes, record which response actions were taken and which conditions could not initially be evaluated. This preserves the distinction between confirmed observations and matters that still require examination. Investigate Conditions and Contributing Factors OSHA’s hazard identification guidance recommends investigating injuries, illnesses, incidents, and near misses to identify underlying hazards and shortcomings in safety programs. It recommends trained investigation teams involving management and workers. The guidance encourages employers to look for root causes and recognize that an incident may have more than one contributing factor. Reviewing the work process, equipment, available information, and circumstances of the task provides a broader basis for evaluation. A practical investigation worksheet can separate the event sequence, supporting evidence, unresolved questions, and proposed follow-up. Avoid presenting an early theory as the final explanation before relevant information has been considered. Source: OSHA — Hazard Identification and Assessment. Look Beyond a Conclusion of Carelessness OSHA cautions against ending an investigation with a conclusion that someone was careless or failed to follow a procedure. Its guidance recommends asking why the situation existed, including whether procedures, training, equipment, or production pressures contributed. Consider a hypothetical Nassau County business where a worker uses an unexpected route to move materials. An investigation could examine the intended route, the route actually available, and the instructions provided. The purpose is to establish what happened rather than assume a motive. Any resulting conclusion should identify its supporting information. If the evidence does not resolve a question, record the uncertainty instead of filling the gap with speculation. Make Reporting Accessible to Employees OSHA’s worker participation guidance recommends encouraging employees to report injuries, hazards, and near misses. It also emphasizes following up on reports and removing barriers that discourage participation. Employees should have opportunities to contribute to safety decisions and should not experience retaliation for raising safety and health concerns. The guidance includes workers employed by contractors, subcontractors, and temporary staffing agencies. A suggested internal process can offer a clear reporting contact and an alternative route when that person is unavailable. Explain what information is useful and how the organization will respond. For businesses with several shifts or locations, consider whether every worker can reasonably use the process. Source: OSHA — Worker Participation. Distinguish Observations From Interpretations A suggested documentation practice is to record what a person directly observed separately from their explanation of why it occurred. Identify the source of each material statement, the time of the observation when known, and any information still requiring verification. For example, a witness might report hearing a noise before an object fell. That observation does not by itself establish equipment failure. An appropriately qualified examination may be needed before reaching a technical conclusion. Use neutral language when collecting accounts. Where statements differ, document the differences and investigate further. Do not rewrite uncertain recollections into a single apparently verified narrative. Connect Findings to Corrective Actions OSHA’s hazard prevention guidance recommends evaluating control options, preparing a hazard control plan, and checking whether implemented measures remain effective. It also recommends obtaining worker input and consulting safety and health experts for complex hazards. A practical corrective action register can identify the finding being addressed, the selected response, the responsible person, and the evidence needed to verify completion. Keep proposed actions separate from measures already implemented. For a hypothetical Suffolk County warehouse, an investigation might identify questions about a storage arrangement. The action should address the verified condition through an appropriate evaluation rather than simply instruct employees to be more careful. Source: OSHA — Hazard Prevention and Control. Measure Follow-Up as Well as Past Outcomes OSHA describes leading indicators as proactive measures that provide information about activities intended to prevent injuries and illnesses. These differ from lagging indicators, which describe events that have already occurred. Suggested internal measures might include the time taken to review a report, the number of corrective actions awaiting verification, and completion of planned follow-up checks. Select measures that answer a defined management question. A count alone requires interpretation. If reported concerns increase, investigate whether employees are reporting more consistently, conditions have changed, or both. Avoid claiming that a change in report volume proves either improvement or deterioration without supporting evidence. Source: OSHA — Leading Indicators. Review the Broader Safety Program OSHA’s program evaluation guidance recommends using both leading and lagging indicators

Hiring an outside company introduces questions that extend beyond price and scheduling. Who will perform the work? What hazards could the work create? Which insurance documents are relevant? What happens if the provider cannot deliver? For businesses in Nassau County, Suffolk County, and throughout New York, answering these questions is part of managing contractor and vendor relationships. This guide explains relevant principles using official OSHA, New York State Workers’ Compensation Board, and New York State Department of Financial Services resources. It also provides suggested administrative steps for organizing a review. Risk Management International LTD (RMI) offers risk management consulting, including risk transfer strategies, and does not sell insurance. Begin With a Clear Description of the Work A practical contractor review starts with a written description of the proposed assignment. Identify the locations involved, anticipated activities, equipment used, and employees or other people who may be affected. Record whether the provider expects to use subcontractors or temporary workers. As an illustrative example, a Nassau County property manager hiring a maintenance contractor could document the areas the contractor needs to access and the work expected during occupied hours. A Suffolk County warehouse hiring an equipment service provider could identify the equipment involved and how the assignment overlaps with normal operations. These examples are planning prompts. They do not determine the legal responsibilities or insurance requirements of any particular engagement. Coordinate Safety Before Work Begins OSHA’s recommended practices address communication among host employers, contractors, and staffing agencies at workplaces involving multiple employers. The guidance calls for exchanging information about existing hazards, hazards that outside work may introduce, and the procedures used to control them. OSHA also recommends coordinating planning and scheduling to identify conflicts that could affect safety. For a business arranging outside work, this means asking how the assignment interacts with employees, other contractors, and normal activities at the location. A suggested preparation meeting can establish the work boundaries, relevant contacts, reporting arrangements, and questions requiring specialist review. Treat unresolved safety issues as matters requiring action rather than assuming that another organization has already addressed them. Source: OSHA — Communication and Coordination for Host Employers, Contractors, and Staffing Agencies. Understand Temporary Staffing Responsibilities OSHA explains that staffing agencies and host employers share responsibility for maintaining a safe work environment for temporary workers. The extent of each party’s responsibilities depends on the circumstances, including the work performed and the conditions at the host location. Its temporary worker guidance discusses training, hazard communication, and recordkeeping responsibilities. Businesses should therefore avoid assuming that obtaining workers through an agency removes their own workplace safety obligations. A practical review can identify who provides general instruction, who explains site-specific hazards, and who communicates when assignments change. Ask qualified advisers to clarify the actual obligations rather than relying on a generic division of duties. Source: OSHA — Protecting Temporary Workers. Put Agreed Responsibilities in Writing In its published interpretation addressing temporary staffing arrangements, OSHA recommends that staffing agencies and host employers set out their respective responsibilities for compliance with applicable safety standards in their contract. The agency emphasizes that relevant training requirements depend on the industry, worksite, and job duties. This supports documenting the responsibilities discussed before an assignment begins. However, contract wording should not be treated as proof that the parties have fulfilled their duties. For other vendor relationships, a suggested administrative step is to record the agreed scope, contacts, deliverables, and escalation process. Have qualified legal counsel review provisions involving legal rights, indemnification, or allocation of liability. Source: OSHA — Clarification of Safety Requirements Between a Temporary Staffing Agency and Its Client. Do Not Rely on the Independent Contractor Label Alone The New York State Workers’ Compensation Board publishes guidance for determining independent contractor status. It distinguishes the general factors used outside construction and commercial goods transportation from the specific rules applicable to those industries. The Board’s guidance also explains that insurance carriers may assess general contractors workers’ compensation premiums for subcontractors unless the subcontractors provide proof of their own coverage. Businesses should review the actual working arrangement and applicable rules before reaching a classification conclusion. A suggested review file can include the work description, relevant business information, and questions submitted to a qualified adviser. Do not assume that an invoice or contract heading resolves the classification issue. Source: New York State Workers’ Compensation Board — Identifying an Independent Contractor. Understand What a Certificate of Insurance Shows The New York State Department of Financial Services has explained that certificates of insurance summarize relevant insurance information and should not amend, expand, or otherwise alter the underlying policy. For a Long Island contractor review, receiving a certificate should therefore prompt a comparison with the actual requirements of the engagement. It should not be treated as a guarantee that every activity or claim is covered. Suggested questions include whether the document identifies the intended business, whether the stated policy periods are relevant, and whether additional policy information is needed. Refer coverage questions to an appropriately qualified insurance professional and request supporting policy language when necessary. Source: New York State Department of Financial Services — The Use of Certificates of Insurance. Resolve Document Conflicts Through the Appropriate Professionals A later Department of Financial Services opinion similarly states that a licensed insurance producer may not complete a certificate that effectively changes the terms of the applicable insurance policy. If a business requests wording that the provider’s insurance representative cannot confirm, the next step is clarification. Avoid treating an edited certificate as a substitute for reviewing the relevant insurance arrangements. A suggested process is to document the requested requirement, identify the unresolved issue, and bring together the appropriate legal and insurance advisers. Keep the written response with the engagement records. This article does not determine whether a specific policy satisfies a particular contract. Source: New York State Department of Financial Services — Opinion No. 11-01-08, Certificates of Insurance. Include Contractor Employees in Safety Communications OSHA’s worker participation guidance recommends involving workers throughout a safety program, including workers employed by contractors, subcontractors, and

A workplace hazard assessment gives employers a structured way to examine working conditions, identify potential sources of injury or illness, and determine what needs attention. For Long Island businesses, the assessment should reflect actual operations, whether employees work in an office, warehouse, manufacturing facility, retail store, or changing jobsite. This guide explains workplace risk assessment practices using official OSHA and National Institute for Occupational Safety and Health resources. It also includes clearly identified examples of how businesses in Nassau and Suffolk counties can organize their reviews. Risk Management International LTD (RMI) provides risk management consulting, with published services that include risk control and prevention. Understand the Difference Between Guidance and Requirements OSHA’s Recommended Practices for Safety and Health Programs provide a framework for managing workplace safety proactively. The framework addresses management leadership, worker participation, hazard identification, prevention, training, and program evaluation. These recommended practices should be read alongside the specific requirements applicable to the business. A general assessment does not establish compliance with every occupational safety standard, and this article does not determine which standards apply to an individual employer. When conducting a workplace safety review, identify the activities being assessed and ask a qualified professional to clarify any specialized requirements. Keep recommendations separate from confirmed legal obligations in the resulting action plan. Source: OSHA — Recommended Practices for Safety and Health Programs. Define the Scope of the Workplace Review Begin by describing the locations, activities, and employees included in the assessment. A practical scope statement might identify the main facility, storage areas, maintenance activities, delivery operations, and work performed at customer locations. OSHA recommends regular inspections covering operations, equipment, work areas, and facilities. Its guidance also includes office functions and activities involving contractors, subcontractors, and temporary employees. As an illustrative planning example, a Nassau County company with an office and separate storage area should identify both areas in its review. A walkthrough limited to the reception area would not answer questions about how materials are stored or handled elsewhere. Source: OSHA — Hazard Identification and Assessment. Give Employees a Meaningful Role OSHA explains that employees often have direct knowledge of hazards associated with their jobs. Its worker participation guidance recommends involving workers in establishing, operating, evaluating, and improving safety programs. Participation should include opportunities to raise concerns and contribute information. OSHA also emphasizes removing barriers that discourage reporting, including fear of retaliation. A suggested application is to ask employees to explain tasks that differ from written procedures or become difficult during busy periods. Record their observations and communicate how concerns will be reviewed. For a Suffolk County employer with multiple shifts, consider how workers on each shift can contribute rather than relying entirely on one supervisor’s observations. Source: OSHA — Worker Participation. Document Observations Without Jumping to Conclusions OSHA recommends documenting inspections so employers can verify that hazardous conditions have been corrected. Its guidance identifies photographs or video as possible tools for discussing problem areas and evaluating controls. A practical assessment record can distinguish what was observed, who may be exposed, what information remains missing, and which person will arrange follow-up. Avoid labeling equipment safe merely because it appears to operate normally during a short visit. For example, an assessment might record that a machine requires specialist evaluation rather than offer an unsupported conclusion about its safeguards. Documentation should accurately communicate the limits of the review. Use the Hierarchy of Controls NIOSH describes a preferred order for controlling workplace hazards: elimination, substitution, engineering controls, administrative controls, and personal protective equipment. Elimination removes the hazard, while substitution replaces its source with a safer alternative. Engineering controls separate people from hazards through changes to equipment or the work environment. Administrative controls address how work is performed. Personal protective equipment provides protection worn by the worker. NIOSH explains that the higher levels generally depend less on individual action and that proposed substitutes should be evaluated for new risks. This framework encourages employers to examine stronger control options before relying exclusively on instructions or protective equipment. Selecting an appropriate measure still requires understanding the task and exposure. Source: NIOSH — Hierarchy of Controls. Turn Findings Into a Hazard Control Plan OSHA recommends developing a plan to implement selected controls, assigning responsibility, and tracking progress. It also recommends checking that controls work after installation and maintaining equipment and protective measures. Where resources are constrained, OSHA discusses prioritizing higher-risk hazards, while emphasizing that employers remain responsible for protecting workers from recognized serious hazards. A suggested action register can identify the concern, proposed response, responsible manager, interim precautions requiring professional review, and evidence needed to verify completion. Scheduling an action should not be confused with correcting the underlying condition. Source: OSHA — Hazard Prevention and Control. Match Training to the Work OSHA’s education and training guidance recommends explaining workplace hazards and the controls used to address them. It also discusses training for workers with specific safety program responsibilities and additional training when changed tasks or working conditions introduce hazards. For a Long Island business, a practical training review can compare current assignments with the information employees have received. Ask whether the training addresses the equipment, materials, and procedures actually used. As an illustrative example, an employee assigned a new task may need instruction specific to that assignment. A general orientation document alone does not establish that the employee understands every task-related hazard. Source: OSHA — Education and Training. Consider Ergonomic Exposures OSHA’s ergonomics guidance describes engineering controls that physically change the workplace to reduce exposure. Examples include mechanical devices that assist with lifting and positioning materials. For an assessment, examine the task before deciding on an improvement. A suggested review might ask how materials are moved, where employees reach, and whether tools or work surfaces fit the activity. A hypothetical warehouse considering a lifting aid should evaluate whether the device suits its actual loads and work area. The example does not prescribe equipment for every facility or replace a task-specific assessment by a qualified professional. Source: OSHA — Solutions to Control Ergonomic Hazards. Evaluate Protective

What would your business do if employees could not enter the building, a critical supplier stopped delivering, or essential technology became unavailable? Business continuity planning addresses these questions before an interruption forces management to make decisions under pressure. For businesses in Nassau County, Suffolk County, and throughout New York, the starting point is understanding which activities must continue and what resources those activities require. This article explains preparedness concepts using federal government resources, including Ready.gov, the U.S. Small Business Administration, NIST, and CISA. Planning examples are illustrative rather than accounts of actual incidents. Risk Management International LTD (RMI) provides risk management consulting, including strategic and operational risk management, and does not sell insurance. What Does Business Continuity Planning Cover? Ready.gov identifies business continuity, emergency response, crisis communications, and information technology disaster recovery as connected parts of business preparedness. Its guidance recommends establishing a continuity team and developing technology recovery arrangements alongside the broader continuity plan. These activities address different questions. Emergency response concerns immediate protective actions. Continuity planning examines how essential work can proceed during disruption. Technology recovery addresses restoring systems and information needed to support that work. An organization should coordinate these activities while recognizing their different purposes. Source: Ready.gov — Emergency Plans. Begin With the Business, Not a Generic Template The U.S. Small Business Administration recommends assessing business-specific vulnerabilities, creating a response plan tailored to operations, and practicing that plan with staff. It also advises keeping the plan accessible and addressing immediate priorities. For a Long Island organization, this means describing how the company actually operates before selecting recovery arrangements. A professional office, food distributor, manufacturer, and construction contractor may depend on very different resources. A template can organize information, but it cannot establish which activities matter most to a particular company. Source: U.S. Small Business Administration — Prepare for Emergencies. Identify Hazards Without Treating Scenarios as Predictions Ready.gov’s business risk assessment worksheet considers both the probability of a scenario and its possible effects. The worksheet addresses impacts on people, property, operations, the environment, and the organization, including financial, contractual, regulatory, and reputational considerations. This provides a structured way to discuss potential disruptions without claiming that a particular event will occur. Management should record the information supporting its assessment and identify uncertainty rather than present assumptions as verified facts. For example, an organization evaluating a facility access interruption should document what would become unavailable and which activities would be affected. It should not assign a precise loss estimate without supporting information. Source: Ready.gov — Business Risk Assessment Table. Use a Business Impact Analysis to Examine Essential Activities NIST defines a business impact analysis as examining operational functions and the effects that disruption might have on them. The focus is on understanding consequences for the business. Suggested questions for an internal assessment include: Which activities support customer commitments? Which processes depend on a particular employee or system? What happens if a process stops for several hours or several days? Which information is needed to restart it? A hypothetical Nassau County service company might examine appointment scheduling, customer communications, and access to work records separately. These activities may require different recovery arrangements. The example illustrates the assessment process and does not establish priorities for every service company. Source: NIST — Business Impact Analysis. Document Important Contacts and Outside Dependencies The SBA’s continuity planning guidance recommends creating a contact list for important contractors and vendors that a business expects to use during an emergency. The same guidance encourages organizations to begin planning before disruption occurs. A practical application is to record a primary contact, an alternative contact, and the service each provider supports. Keep the information available through an authorized method that does not depend entirely on the system being considered in the disruption scenario. For a hypothetical Suffolk County distributor, the exercise could include contacting transportation providers and asking about alternative delivery arrangements. Record confirmed capabilities separately from options that still require discussion or agreement. Source: SBA — Seven Ways to Start Your Business Continuity Plan. Plan Communications Before They Are Needed Ready.gov explains that emergencies create immediate communication needs involving employees, customers, and other relevant parties. Preparing communications arrangements in advance supports a timely response. As a practical planning step, identify who approves messages, who distributes them, and which channels remain available if normal communications fail. Prepare short message templates that distinguish confirmed information from unresolved questions. A customer update might state which services are affected and when the next update will be provided. Avoid promising a restoration time before the responsible team has established a reasonable basis for it. Include a process for correcting earlier information when circumstances change. Notification duties depend on the circumstances; a general communications checklist does not determine every legal or contractual obligation. Include Technology and Data Recovery CISA’s ransomware guidance recommends maintaining offline, encrypted backups of critical data and regularly testing backups. Its guidance treats recoverability as something organizations must verify rather than assume. For continuity planning, ask the technology team or service provider to identify which information is backed up, how backups are protected, and what restoration testing has demonstrated. Record unanswered questions and the person responsible for resolving them. A suggested exercise is to restore an authorized sample of business information in a controlled environment and check whether it can be used. Technical staff should design the test to protect live operations and sensitive information. A successful sample restoration does not establish that every system can be restored within the same period. Source: CISA and Partners — StopRansomware Guide. Evaluate Alternative Ways to Perform Essential Work Suggested continuity options may include temporary workspace, approved remote access, alternative suppliers, or limited manual procedures. Each option should be checked against actual operational needs before it is described as available. For example, a hypothetical Port Washington office might propose remote work during a building closure. Management would still need to verify equipment availability, authorized access to records, employee responsibilities, and customer communication arrangements. Likewise, naming a replacement supplier in a document does not

An insurance program review gives business owners an opportunity to compare their current coverage with their actual operations. For companies in Nassau County, Suffolk County, and across New York, the central question is whether the insurance program reflects the organization’s property, activities, responsibilities, and potential financial exposures. This guide combines information from official insurance and business resources with a practical review checklist. The checklist is suggested planning guidance, not a statement that every business must follow an identical process. Risk Management International LTD (RMI), based in Port Washington, provides risk management consulting and states that it does not sell insurance. What Is an Insurance Program Review? For purposes of this guide, an insurance program review means an organized examination of insurance documents alongside information about the business. Its purpose is to identify questions about coverage, document operational changes, and determine which issues need further discussion with an insurer, licensed insurance representative, or other qualified adviser. A useful review should produce more than a list of premiums. Suggested deliverables include an inventory of policies, a summary of relevant business changes, a list of unresolved coverage questions, and an action plan assigning responsibility for follow-up. A review does not itself amend a policy or establish that a future claim will be covered. Start With Official New York Insurance Guidance The New York State Department of Financial Services (DFS) explains that property and casualty insurance can address business property losses and liability exposures. Its small-business guidance also warns that coverage forms vary and that exclusions remain important even when a policy is described as providing broad protection. DFS advises businesses to read their policies carefully and work with a licensed insurance representative. For a Long Island insurance program review, this supports a basic starting point: examine the actual policy documents rather than assuming that a product name describes every protection available. Source: New York State Department of Financial Services — Information for Small Businesses. Gather the Documents Before Evaluating Coverage A suggested first step is to assemble complete current policies, including declarations, coverage forms, endorsements, and renewal documents. Keep related applications, schedules, correspondence, and contracts available for reference. If a document is missing, request it before reaching a conclusion about coverage. Create a working inventory showing the insurer, policy period, business entity named in the documents, and person responsible for managing the policy. Record questions separately from confirmed findings. For example, an unfamiliar endorsement should initially be marked for clarification rather than immediately described as a coverage gap. This approach keeps the review grounded in evidence and makes follow-up discussions easier to organize. Describe What the Business Actually Does Prepare a current description of operations to use during the review. Suggested topics include services provided, products sold, work locations, property used, vehicles, outside contractors, and important customer relationships. Identify changes since the information was last supplied to the insurance representative. Consider a hypothetical Nassau County business that previously operated from one office and has added a warehouse. The review question is whether the insurance documents and information supplied to the insurer accurately reflect that change. The example does not establish that a particular policy covers or excludes the warehouse. The same method can be used for a Suffolk County company introducing a new service or working at additional customer locations. Review Property Information and Valuation Questions A suggested property review begins with an inventory of buildings, equipment, furniture, inventory, and other business assets. Identify which assets are owned, leased, or held for others, and gather available valuation information. Questions for the insurance representative might include how values were established, which locations are listed, and how the policy treats particular categories of property. Ask for an explanation of relevant valuation provisions and supporting policy language. Avoid treating an accounting value, purchase price, or informal estimate as automatically equivalent to the amount appropriate for insurance purposes. The review should document the valuation method being discussed and leave unresolved technical questions with the appropriate professional. Understand Business Interruption Coverage The National Association of Insurance Commissioners (NAIC) explains that business interruption insurance, also called business income insurance, can address monetary losses from suspended operations following a covered event that causes physical property damage. Its guidance describes businessowners policies as packages that commonly combine property, liability, and business interruption coverage. This does not mean every closure qualifies. The applicable policy determines coverage. Suggested review questions include which events trigger protection, what expenses are included, how the coverage period is defined, and what information would be needed to document a claim. Source: NAIC — Business Interruption and Business Owner Policy. Examine Flood Exposure Separately FEMA’s National Flood Insurance Program (NFIP) explains that standard commercial property insurance typically does not cover flood damage. Its commercial flood guidance also identifies limitations: NFIP flood coverage does not provide business interruption or loss-of-use protection. For Long Island businesses reviewing flood exposure, ask separate questions about physical damage and interrupted operations. Do not assume that purchasing building or contents flood coverage also resolves lost-income exposure. Ask the insurance representative to identify available options and explain the actual terms. Flood-related planning should be specific to the property and business. This article does not assign a flood risk level to any individual Nassau or Suffolk County location. Sources: NFIP — The Ins and Outs of Commercial Coverage and NFIP — Protecting Businesses With Flood Insurance. Compare Coverage Categories With Business Activities The U.S. Small Business Administration (SBA) identifies several business insurance categories, including general liability, product liability, professional liability, and commercial property insurance. Its descriptions distinguish protection associated with different types of business exposures. The SBA also recommends reassessing insurance needs as a business grows. For a program review, use those categories as discussion prompts rather than assuming every company needs every product. Describe the business activity first, then ask which coverage, if any, addresses it and what limitations apply. Source: U.S. Small Business Administration — Get Business Insurance. Include Contracts in the Review Process A suggested checklist should include leases, customer agreements, financing documents,

Businesses throughout Long Island face a variety of operational challenges that require careful planning, ongoing evaluation, and informed decision-making. From workplace safety and business interruptions to cybersecurity and contractual obligations, organizations must understand the risks that could affect their employees, property, operations, and financial stability. Effective business risk management begins with identifying those exposures and developing practical strategies to address them. For organizations in Nassau County, Suffolk County, and the greater New York metropolitan area, risk management is not limited to purchasing insurance. It involves examining business processes, identifying vulnerabilities, evaluating potential consequences, and implementing appropriate controls. Risk Management International LTD (RMI) provides risk management consulting services for organizations seeking a more structured approach to understanding their exposures. What Is Business Risk Management? Business risk management is the process of identifying, assessing, addressing, and monitoring events or conditions that could interfere with an organization’s objectives. Risks may involve employees, physical property, information systems, contractual relationships, financial resources, or the ability to continue operating after an unexpected disruption. A risk management program should reflect the organization’s actual activities. For example, a construction company may need to examine jobsite hazards and subcontractor relationships, while a professional services firm may place greater emphasis on contractual responsibilities, information security, and business continuity. There is no single risk management strategy suitable for every company. The objective is to understand the organization’s specific exposures and establish appropriate priorities. Why Risk Management Matters for Long Island Businesses Long Island includes businesses operating in construction, manufacturing, healthcare, hospitality, retail, transportation, professional services, and other sectors. Organizations within these industries may encounter different combinations of operational and financial risk. A business that relies on physical equipment may be vulnerable to machinery breakdowns. A company dependent on digital systems may experience operational disruption when technology becomes unavailable. Organizations with employees must also consider workplace safety and applicable employment-related responsibilities. Risk management helps business leaders evaluate these issues systematically rather than responding only after an incident occurs. The Occupational Safety and Health Administration (OSHA) recommends proactive safety and health programs that identify and address workplace hazards before injuries or illnesses occur. Although OSHA’s recommended program framework is not itself a substitute for applicable legal requirements, it provides a useful model for organized hazard management. Source: OSHA — Recommended Practices for Safety and Health Programs. Step 1: Identify Business Risks The first step in a risk management review is identifying circumstances that could disrupt business operations or create financial, legal, safety, or reputational consequences. Business owners and management teams can begin by examining their facilities, equipment, workforce, technology, vendors, contracts, and essential business processes. Reviewing prior incidents, customer complaints, equipment failures, and operational interruptions may reveal recurring problems. Employees can also provide valuable information because they often have direct knowledge of daily working conditions and procedural weaknesses. OSHA specifically recommends collecting information about existing workplace hazards, conducting periodic inspections, investigating incidents and near misses, and evaluating hazards associated with emergencies or unusual operations. These practices provide a documented foundation for understanding workplace exposures. Source: OSHA — Hazard Identification and Assessment. Step 2: Conduct a Business Risk Assessment After identifying potential risks, an organization should evaluate their possible consequences and determine which issues require attention first. A practical risk assessment considers factors such as the likelihood of an event, the severity of its potential impact, the number of people or operations affected, and the effectiveness of existing controls. For example, a business might identify a recurring equipment problem that could interrupt production. Management could assess the equipment’s importance, previous maintenance history, availability of replacement parts, and possible operational consequences. Risk assessments should rely on available evidence and documented assumptions. Organizations should avoid assigning unsupported probabilities or presenting speculative financial losses as established facts. OSHA’s hazard assessment guidance recommends evaluating the severity and likelihood of incidents to prioritize corrective actions, while emphasizing that employers retain responsibility for addressing serious recognized hazards. Step 3: Develop Risk Prevention and Control Measures Identifying a risk is useful only when an organization considers how to address it. Risk controls may involve changing a work process, improving equipment safeguards, providing training, revising procedures, or introducing monitoring activities. OSHA recommends evaluating controls through a hierarchy that prioritizes eliminating hazards, substituting safer alternatives, and using engineering controls before relying on administrative measures or personal protective equipment when applicable. The appropriate control depends on the circumstances. A warehouse may examine material-handling procedures, while an office may review electrical safety, workstation design, or emergency exits. Management should document who is responsible for implementing corrective actions and establish a process for checking whether those actions are effective. Source: OSHA — Hazard Prevention and Control. Workplace Safety Risk Management Workplace safety is an important component of operational risk management. Employers should identify hazards relevant to their industry and determine which federal, state, and local requirements apply to their activities. Safety considerations may include machinery, vehicles, electrical systems, lifting activities, chemical exposure, slips and falls, and emergency procedures. OSHA’s recommended practices encourage management leadership, employee participation, hazard identification, training, and continuous program evaluation. Organizations should distinguish between voluntary recommended practices and mandatory occupational safety standards. A general risk assessment does not replace compliance with specific legal requirements. Businesses with specialized operations may require assistance from qualified occupational safety professionals. Workers’ Compensation and Employee-Related Exposures Employee-related risk management includes understanding workplace injury procedures, maintaining appropriate records, reviewing employment classifications, and evaluating applicable insurance obligations. New York businesses should consult the New York State Workers’ Compensation Board for official information about required workers’ compensation coverage. Businesses using temporary employees, seasonal workers, or subcontractors should pay particular attention to worker classification and coverage documentation. Operational risk management may also include reviewing employee training, incident investigation procedures, and return-to-work coordination where appropriate. These activities do not replace statutory obligations or professional legal advice. Source: New York State Workers’ Compensation Board — Coverage Requirements. Business Continuity and Disaster Preparedness Business continuity planning addresses how an organization can maintain or restore essential operations following a disruption. Potential disruptions include severe weather,