Risk analysis is the process of assessing the likelihood of an adverse event occurring within the corporate, government, or environmental sector. Risk analysis is the study of the underlying uncertainty of a given course of action and refers to the uncertainty of forecasted cash flow streams, the variance of portfolio or stock returns, the probability of a project's success or failure, and possible future economic states.

Risk Analysis

<ul><li>Quantitative Risk Analysis. Under quantitative risk analysis, a risk model is built using simulation or deterministic statistics to assign numerical values to risk. Inputs that are mostly assumptions and random variables are fed into a risk model.</li><li>Qualitative Risk Analysis. Qualitative risk analysis is an analytical method that does not identify and evaluate risks with numerical and quantitative ratings. Qualitative analysis involves a written definition of the uncertainties, an evaluation of the extent of the impact (if the risk ensues), and countermeasure plans in the case of a negative event occurring.</li></ul>

Types of Risk Analysis

Risk is a probabilistic measure and so can never tell you for sure what your precise risk exposure is at a given time, only what the distribution of possible losses are likely to be if and when they occur. There are also no standard methods for calculating and analyzing risk.

Limitations of Risk Analysis

<h2 dir="ltr"> What Is Risk Analysis? </h2>
Risk analysis is the process of assessing the likelihood of an <a href="https://www.investopedia.com/terms/m/maximum-foreseeable-loss.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">adverse event</a> occurring within the corporate, government, or environmental sector. Risk analysis is the study of the underlying uncertainty of a given course of action and refers to the uncertainty of forecasted <a href="https://www.investopedia.com/terms/c/cashflow.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">cash flow</a> streams, the variance of portfolio or stock returns, the probability of a project's success or failure, and possible future economic states.

Risk analysts often work in tandem with forecasting professionals to minimize future negative unforeseen effects. All firms and individuals face certain <a href="https://www.investopedia.com/terms/r/risk.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">risks</a>; without risk, rewards are less likely. The problem is that too much risk can lead to failure. Risk analysis allows&nbsp;a balance to be struck between taking risks and reducing them.
<h3>
Key Takeaways</h3><UL><LI>Risk analysis seeks to identify, measure, and mitigate various risk exposures or hazards facing a business, investment, or project.</LI><LI>Quantitative risk analysis uses mathematical models and simulations to assign numerical values to risk.</LI><LI>Qualitative risk analysis relies on a person's subjective judgment to build a theoretical model of risk for a given scenario.</LI><LI>Risk analysis is often both an art and a science.</LI></UL><h2 dir="ltr"> Understanding Risk Analysis </h2>
Risk assessment enables corporations, governments, and investors to assess the probability that an adverse event might negatively impact a business, economy, project, or <a href="https://www.investopedia.com/terms/i/investment.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">investment</a>. &nbsp;Assessing risk is essential for determining how worthwhile a specific project or investment is and the best process(es) to mitigate those risks.&nbsp;Risk analysis&nbsp;provides different approaches that can be used to assess the <a href="https://www.investopedia.com/terms/r/riskreturntradeoff.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">risk and reward tradeoff</a> of a potential investment opportunity.

A risk analyst starts by identifying what could potentially go wrong. These negatives must be weighed against a probability metric that measures the likelihood of the event occurring.

Finally, risk analysis attempts to estimate the extent of the impact that will be made if the event happens. Many risks that are identified, such as <a href="https://www.investopedia.com/terms/m/marketrisk.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">market risk</a>, credit risk, currency risk, and so on, can be reduced through <a href="https://www.investopedia.com/trading/hedging-beginners-guide/" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">hedging</a> or by purchasing insurance.

Almost all sorts of large businesses require a minimum sort of risk analysis. For example, commercial banks need to properly hedge foreign exchange exposure of overseas loans, while large department stores must factor in the possibility of reduced revenues due to a global <a href="https://www.investopedia.com/terms/r/recession.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">recession</a>. It is important to know that risk analysis allows professionals to identify and mitigate risks, but not avoid them completely.
<h2 dir="ltr"> Types of Risk Analysis </h2>
Risk analysis can be quantitative or qualitative.
<h3 dir="ltr"> Quantitative Risk Analysis </h3>
Under <a href="https://www.investopedia.com/terms/q/quantitativeanalysis.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">quantitative</a> risk analysis, a risk model is built using simulation or deterministic statistics to assign numerical values to risk. Inputs that are mostly assumptions and <a href="https://www.investopedia.com/terms/r/random-variable.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">random variables</a> are fed into a risk model.

For any given range of input, the model generates a range of output or outcome. The model's output is analyzed using graphs, <a href="https://www.investopedia.com/terms/s/scenario_analysis.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">scenario analysis</a>, and/or <a href="https://www.investopedia.com/terms/s/sensitivityanalysis.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">sensitivity analysis</a> by risk managers to make decisions to mitigate and deal with the risks.

A <a href="https://www.investopedia.com/terms/m/montecarlosimulation.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">Monte Carlo simulation</a> can be used to generate a range of possible outcomes of a decision made or action taken. The simulation is a quantitative technique that calculates results for the random input variables repeatedly, using a different set of input values each time. The resulting outcome from each input is recorded, and the final result of the model is a <a href="https://www.investopedia.com/terms/p/probabilitydistribution.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">probability distribution</a> of all possible outcomes.

The outcomes can be summarized on a distribution graph showing some measures of central tendency such as the mean and median, and assessing the variability of the data through <a href="https://www.investopedia.com/terms/s/standarddeviation.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">standard deviation</a> and variance. The outcomes can also be assessed using <a href="https://www.investopedia.com/terms/r/riskmanagement.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">risk management</a> tools such as scenario analysis and sensitivity tables. A scenario analysis shows the best, middle, and worst outcome of any event. Separating the different outcomes from best to worst provides a reasonable spread of insight for a risk manager.

For example, an American company that operates on a global scale might want to know how its <a href="https://www.investopedia.com/terms/b/bottomline.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">bottom line</a> would fare if the <a href="https://www.investopedia.com/terms/e/exchangerate.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">exchange rate</a> of select countries strengthens. A sensitivity table shows how outcomes vary when one or more random variables or assumptions are changed.

Elsewhere, a <a href="https://www.investopedia.com/terms/p/portfoliomanager.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">portfolio manager</a> might use a sensitivity table to assess how changes to the different values of each <a href="https://www.investopedia.com/terms/s/security.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">security</a> in a portfolio will impact the variance of the portfolio. Other types of risk management tools include decision trees and break-even analysis.
<h3 dir="ltr"> Qualitative Risk Analysis </h3>
<a href="https://www.investopedia.com/terms/q/qualitativeanalysis.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">Qualitative</a> risk analysis is an analytical method that does not identify and evaluate risks with numerical and quantitative ratings. Qualitative analysis involves a written definition of the uncertainties, an evaluation of the extent of the impact (if the risk ensues), and countermeasure plans in the case of a negative event occurring.

Examples of qualitative risk tools include <a href="https://www.investopedia.com/terms/s/swot.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">SWOT analysis</a>, cause and effect diagrams, decision matrix, <a href="https://www.investopedia.com/terms/g/gametheory.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">game theory</a>, etc. A firm that wants to measure the impact of a security breach on its servers may use a qualitative risk technique to help prepare it for any lost income that may occur from a data breach.
<div dir="ltr">
While most investors are concerned about downside risk, mathematically, the risk is the variance both to the downside and the upside.</div><h2 dir="ltr"> Example of Risk Analysis: Value at Risk (VaR) </h2>
<a href="https://www.investopedia.com/terms/v/var.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">Value at risk</a> (VaR)&nbsp;is a statistic that measures and quantifies the level of financial risk within a firm, <a href="https://www.investopedia.com/terms/p/portfolio.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">portfolio</a>, or position over a specific time frame. This metric is most commonly used by investment and&nbsp;commercial banks&nbsp;to determine the extent and occurrence ratio of potential losses in their institutional portfolios. Risk managers use&nbsp;VaR&nbsp;to measure and control the level of risk exposure. One can apply&nbsp;VaR calculations to specific positions or whole portfolios or to measure firm-wide risk exposure.

VaR is calculated by shifting <a href="https://www.investopedia.com/terms/h/historical-returns.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">historical returns</a> from worst to best with the assumption that returns will be repeated, especially where it concerns risk. As a historical example, let's look at the Nasdaq 100 <a href="https://www.investopedia.com/terms/e/etf.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">ETF</a>, which trades under the symbol QQQ (sometimes called the "cubes") and which started trading in March of 1999. If we calculate each daily return, we produce a rich data set of more than 1,400 points. The worst are generally visualized on the left, while the best returns are placed on the right.

For more than 250 days, the daily return for the ETF was calculated between 0% and 1%. In January 2000, the ETF returned 12.4%. But there are points at which the ETF resulted in losses as well. At its worst, the ETF ran daily losses of 4% to 8%. This period is referred to as the ETF's worst 5%. Based on these historic returns, we can assume with 95% certainty that the ETF's largest losses won't go beyond 4%. So if we invest $100, we can say with 95% certainty that our losses won't go beyond $4.

One important thing to keep in mind is that VaR doesn't provide analysts with absolute certainty. Instead, it's an estimate based on probabilities. The probability gets higher if you consider the higher returns, and only consider the worst 1% of the returns. The Nasdaq 100 ETF's losses of 7% to 8% represent the worst 1% of its performance. We can thus assume with 99% certainty that our worst return won't lose us $7 on our investment. We can also say with 99% certainty that a $100 investment will only lose us a maximum of $7.
<h2 dir="ltr"> Limitations of Risk Analysis </h2>
Risk is a probabilistic measure and so can never tell you for sure what your precise risk exposure is at a given time, only what the distribution of possible losses are likely to be if and when they occur. There are also no standard methods for calculating and analyzing risk, and even VaR can have several different ways of approaching the task. Risk is often assumed to occur using normal distribution probabilities, which in reality rarely occur and cannot account for extreme or "<a href="https://www.investopedia.com/terms/b/blackswan.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">black swan</a>" events.

The&nbsp;<a href="https://www.investopedia.com/terms/f/financial-crisis.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">financial crisis of&nbsp;</a><a href="https://www.investopedia.com/articles/economics/09/financial-crisis-review.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="2" rel="noopener noreferrer" dir="ltr">2008</a>, for example, exposed these problems as relatively benign VaR calculations greatly understated the potential occurrence of risk events posed by portfolios of <a href="https://www.investopedia.com/terms/s/subprime_mortgage.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="3" rel="noopener noreferrer" dir="ltr">subprime mortgages</a>.

Risk magnitude was also underestimated, which resulted in extreme <a href="https://www.investopedia.com/terms/l/leverageratio.asp" data-component="link" data-source="inlineLink" data-type="internalLink" data-ordinal="1" rel="noopener noreferrer" dir="ltr">leverage ratios</a> within subprime portfolios. As a result, the underestimations of occurrence and risk magnitude left institutions unable to cover billions of dollars in losses as&nbsp;subprime mortgage values collapsed.

Risk analysis is the process of assessing the likelihood of an adverse event occurring within the corporate, government, or environmental sector.

problemsolving

Problem Solving

Risk analysis is the process of assessing the likelihood of an <a href="https://www.investopedia.com/terms/m/maximum-foreseeable-loss.asp">adverse event </a>occurring within the corporate, government, or environmental sector. Risk analysis is the study of the underlying uncertainty of a given course of action and refers to the uncertainty of forecasted <a href="https://www.investopedia.com/terms/c/cashflow.asp">cash flow </a>streams, the variance of portfolio or stock returns, the probability of a project's success or failure, and possible future economic states.

Risk analysts often work in tandem with forecasting professionals to minimize future negative unforeseen effects. All firms and individuals face certain <a href="https://www.investopedia.com/terms/r/risk.asp">risks </a>; without risk, rewards are less likely. The problem is that too much risk can lead to failure. Risk analysis allows a balance to be struck between taking risks and reducing them.

<ul><li>Risk analysis seeks to identify, measure, and mitigate various risk exposures or hazards facing a business, investment, or project. </li><li>Quantitative risk analysis uses mathematical models and simulations to assign numerical values to risk. </li><li>Qualitative risk analysis relies on a person's subjective judgment to build a theoretical model of risk for a given scenario. </li><li>Risk analysis is often both an art and a science. </li> </ul>

Risk assessment enables corporations, governments, and investors to assess the probability that an adverse event might negatively impact a business, economy, project, or <a href="https://www.investopedia.com/terms/i/investment.asp">investment </a>.  Assessing risk is essential for determining how worthwhile a specific project or investment is and the best process(es) to mitigate those risks. Risk analysis provides different approaches that can be used to assess the <a href="https://www.investopedia.com/terms/r/riskreturntradeoff.asp">risk and reward tradeoff </a>of a potential investment opportunity.

A risk analyst starts by identifying what could potentially go wrong. These negatives must be weighed against a probability metric that measures the likelihood of the event occurring.

Finally, risk analysis attempts to estimate the extent of the impact that will be made if the event happens. Many risks that are identified, such as <a href="https://www.investopedia.com/terms/m/marketrisk.asp">market risk </a>, credit risk, currency risk, and so on, can be reduced through <a href="https://www.investopedia.com/trading/hedging-beginners-guide/">hedging </a>or by purchasing insurance.

Almost all sorts of large businesses require a minimum sort of risk analysis. For example, commercial banks need to properly hedge foreign exchange exposure of overseas loans, while large department stores must factor in the possibility of reduced revenues due to a global <a href="https://www.investopedia.com/terms/r/recession.asp">recession </a>. It is important to know that risk analysis allows professionals to identify and mitigate risks, but not avoid them completely.

Risk analysis can be quantitative or qualitative.

Under <a href="https://www.investopedia.com/terms/q/quantitativeanalysis.asp">quantitative </a>risk analysis, a risk model is built using simulation or deterministic statistics to assign numerical values to risk. Inputs that are mostly assumptions and <a href="https://www.investopedia.com/terms/r/random-variable.asp">random variables </a>are fed into a risk model.

For any given range of input, the model generates a range of output or outcome. The model's output is analyzed using graphs, <a href="https://www.investopedia.com/terms/s/scenario_analysis.asp">scenario analysis </a>, and/or <a href="https://www.investopedia.com/terms/s/sensitivityanalysis.asp">sensitivity analysis </a>by risk managers to make decisions to mitigate and deal with the risks.

A <a href="https://www.investopedia.com/terms/m/montecarlosimulation.asp">Monte Carlo simulation </a>can be used to generate a range of possible outcomes of a decision made or action taken. The simulation is a quantitative technique that calculates results for the random input variables repeatedly, using a different set of input values each time. The resulting outcome from each input is recorded, and the final result of the model is a <a href="https://www.investopedia.com/terms/p/probabilitydistribution.asp">probability distribution </a>of all possible outcomes.

The outcomes can be summarized on a distribution graph showing some measures of central tendency such as the mean and median, and assessing the variability of the data through <a href="https://www.investopedia.com/terms/s/standarddeviation.asp">standard deviation </a>and variance. The outcomes can also be assessed using <a href="https://www.investopedia.com/terms/r/riskmanagement.asp">risk management </a>tools such as scenario analysis and sensitivity tables. A scenario analysis shows the best, middle, and worst outcome of any event. Separating the different outcomes from best to worst provides a reasonable spread of insight for a risk manager.

For example, an American company that operates on a global scale might want to know how its <a href="https://www.investopedia.com/terms/b/bottomline.asp">bottom line </a>would fare if the <a href="https://www.investopedia.com/terms/e/exchangerate.asp">exchange rate </a>of select countries strengthens. A sensitivity table shows how outcomes vary when one or more random variables or assumptions are changed.

Elsewhere, a <a href="https://www.investopedia.com/terms/p/portfoliomanager.asp">portfolio manager </a>might use a sensitivity table to assess how changes to the different values of each <a href="https://www.investopedia.com/terms/s/security.asp">security </a>in a portfolio will impact the variance of the portfolio. Other types of risk management tools include decision trees and break-even analysis.

<a href="https://www.investopedia.com/terms/q/qualitativeanalysis.asp">Qualitative </a>risk analysis is an analytical method that does not identify and evaluate risks with numerical and quantitative ratings. Qualitative analysis involves a written definition of the uncertainties, an evaluation of the extent of the impact (if the risk ensues), and countermeasure plans in the case of a negative event occurring.

Examples of qualitative risk tools include <a href="https://www.investopedia.com/terms/s/swot.asp">SWOT analysis </a>, cause and effect diagrams, decision matrix, <a href="https://www.investopedia.com/terms/g/gametheory.asp">game theory </a>, etc. A firm that wants to measure the impact of a security breach on its servers may use a qualitative risk technique to help prepare it for any lost income that may occur from a data breach.

While most investors are concerned about downside risk, mathematically, the risk is the variance both to the downside and the upside.

Example of Risk Analysis: Value at Risk (VaR)

<a href="https://www.investopedia.com/terms/v/var.asp">Value at risk </a>(VaR) is a statistic that measures and quantifies the level of financial risk within a firm, <a href="https://www.investopedia.com/terms/p/portfolio.asp">portfolio </a>, or position over a specific time frame. This metric is most commonly used by investment and commercial banks to determine the extent and occurrence ratio of potential losses in their institutional portfolios. Risk managers use VaR to measure and control the level of risk exposure. One can apply VaR calculations to specific positions or whole portfolios or to measure firm-wide risk exposure.

VaR is calculated by shifting <a href="https://www.investopedia.com/terms/h/historical-returns.asp">historical returns </a>from worst to best with the assumption that returns will be repeated, especially where it concerns risk. As a historical example, let's look at the Nasdaq 100 <a href="https://www.investopedia.com/terms/e/etf.asp">ETF </a>, which trades under the symbol QQQ (sometimes called the "cubes") and which started trading in March of 1999. If we calculate each daily return, we produce a rich data set of more than 1,400 points. The worst are generally visualized on the left, while the best returns are placed on the right.

For more than 250 days, the daily return for the ETF was calculated between 0% and 1%. In January 2000, the ETF returned 12.4%. But there are points at which the ETF resulted in losses as well. At its worst, the ETF ran daily losses of 4% to 8%. This period is referred to as the ETF's worst 5%. Based on these historic returns, we can assume with 95% certainty that the ETF's largest losses won't go beyond 4%. So if we invest $100, we can say with 95% certainty that our losses won't go beyond $4.

One important thing to keep in mind is that VaR doesn't provide analysts with absolute certainty. Instead, it's an estimate based on probabilities. The probability gets higher if you consider the higher returns, and only consider the worst 1% of the returns. The Nasdaq 100 ETF's losses of 7% to 8% represent the worst 1% of its performance. We can thus assume with 99% certainty that our worst return won't lose us $7 on our investment. We can also say with 99% certainty that a $100 investment will only lose us a maximum of $7.

Risk is a probabilistic measure and so can never tell you for sure what your precise risk exposure is at a given time, only what the distribution of possible losses are likely to be if and when they occur. There are also no standard methods for calculating and analyzing risk, and even VaR can have several different ways of approaching the task. Risk is often assumed to occur using normal distribution probabilities, which in reality rarely occur and cannot account for extreme or "<a href="https://www.investopedia.com/terms/b/blackswan.asp">black swan </a>" events.

The <a href="https://www.investopedia.com/terms/f/financial-crisis.asp">financial crisis of  </a><a href="https://www.investopedia.com/articles/economics/09/financial-crisis-review.asp">2008 </a>, for example, exposed these problems as relatively benign VaR calculations greatly understated the potential occurrence of risk events posed by portfolios of <a href="https://www.investopedia.com/terms/s/subprime_mortgage.asp">subprime mortgages </a>.

Risk magnitude was also underestimated, which resulted in extreme <a href="https://www.investopedia.com/terms/l/leverageratio.asp">leverage ratios </a>within subprime portfolios. As a result, the underestimations of occurrence and risk magnitude left institutions unable to cover billions of dollars in losses as subprime mortgage values collapsed.

How Risk Analysis Works

Risk Analysis

Types of Risk Analysis

Limitations of Risk Analysis

CURATED BY

Related collections

More like this