🏠 GEM Resource Hub · 📚 Library · 📘 About RocketLevel · 📘 Playbooks · 🗺️ What's Your Market Worth? · 📅 Book a Call
Your risk is real, but it lives in pieces, and nobody is looking at all of it at once.
The insurance binder, the IT person, the safety folder, the diligence checklist, the one carrier that is half your revenue. The owner's risk map pulls every major exposure into a single view you review on a cadence, so you decide what to do about each risk before it costs you. Think of this as the ongoing operating dashboard you run every quarter; when you are preparing for a sale or a lender, the deeper diligence-grade version is the risk register.
A RocketLevel guide for restoration owners, backed by decades of experience in the trade. About a 7-minute read.
Why one view beats a stack of folders
Plenty of restoration companies cover risk piece by piece. The insurance agent handles policies. The IT contractor handles passwords. The safety manager handles the OSHA binder. The accountant watches cash. A buyer's diligence team, if you ever sell, handles all of it at once, which is exactly why diligence feels brutal: they see the whole picture and you have only ever seen the pieces.
The problem with piecemeal coverage is the gaps between the pieces. The risk that hurts you tends to be the one that fell between folders: the carrier that quietly grew to 60% of revenue while everyone watched their own lane, the estimator who is the only person who knows how to scope a large loss, the cyber exposure nobody thought was their job. No single specialist is accountable for the whole, so the whole goes unmanaged.
The fix is a single page that lists every major risk in the business, rates it, names an owner, and gets reviewed on a schedule. Build it for a future sale or just to sleep better. Either way, you see all of it at once.
The risk categories a restoration company actually carries
Your map does not need a hundred rows. It needs the major categories, named plainly, with the real exposures under each. For a restoration company these are the ones that matter.
- Revenue concentration. Any single carrier, third-party administrator (TPA), or customer that is a large share of your revenue, counted at the parent company. RocketLevel working thresholds: healthy at or under 10% of revenue from one source, caution above 10 and up to 25%, danger above 25%, so exactly 10 reads healthy and exactly 25 reads caution. Once a single relationship clears 25%, a rate cut or a program change stops being a bad quarter and starts being an emergency you have to fund. Run a stability test separately: how many points of total revenue one realistic decision by that source could move (a rate cut, a routing change, a program ending). Circle anything above 5 points. Above 10 is not up for debate. A source can fail that test while its share still reads healthy, and the two problems have different fixes. This is often the largest risk on the map, and the easiest to underrate.
- Key-person dependence. What stalls, breaks, or walks out the door if one person is gone for a month, starting with you. If the property managers do business with you because they know you personally, or one estimator holds all the large-loss knowledge, that is concentration in human form.
- Insurance gaps. Whether your general liability, professional or errors-and-omissions, auto, umbrella, and pollution coverage actually match the work you do and the contracts you sign. Gaps surface at the worst possible moment, on the claim you assumed was covered.
- Cybersecurity and data. How customer data, payment information, and your systems are protected. Restoration companies hold personal and payment data and run on cloud job-management tools, which makes you a target, and clients and buyers increasingly ask.
- Safety and workers' comp. Your experience modification rate (EMR), the multiplier on your workers' comp premium that compares your claims history to similar companies, your incident history, and your OSHA record. A poor safety record raises your insurance cost, threatens commercial bids that screen on safety scores, and signals operational risk to anyone underwriting you.
- Financial, cash, and fraud. Cash-flow exposure from the long lag between work and payment, thin financial controls, and the basic fraud risk of a small office where one person touches both the money and the books.
- Legal, licensing, and compliance. Current licensing in every state and trade you operate in, clean and assignable contracts, assignment-of-benefits (AOB) exposure, and any open disputes or liens. A licensing gap can stall a deal, or a job, cold.
- Business continuity. Your own exposure to the disasters you respond to. If your office floods, your server dies, or a storm takes out your fleet staging, can the company keep operating?