Four Events, No Owner: Building the District's First Risk Register
Three months into her first year, a superintendent of a 4,300-student district with two elementary schools, a middle school, a 1,150-student high school, and a bus depot learns of four unrelated events in one week: a boiler-room carbon monoxide alarm failed and 40 students were evacuated; a parent reported that a volunteer softball coach drove six players to an away game in her own minivan; a $9,000 concession-stand cash box disappeared; and the insurer sent a reservation-of-rights letter on a slip-and-fall claim filed 11 months after the fall. The district has no risk management committee, no written risk register, and no single person accountable for safety, claims, or insurance. The business manager treats the insurance renewal as the risk management function, and each principal handles problems locally. The board wants a written risk management plan before the next budget cycle, and the superintendent has one month to produce a first draft.
1. Apply a recognized risk management process to the four events. For each event, name the dominant treatment and the person who should own it, then state what the first risk register entry should contain.
Read the worked answer
Use the sequence: establish context and objectives, identify exposures, analyze frequency and severity, evaluate against tolerance, treat, then monitor and communicate.
- CO alarm failure - low frequency, potentially fatal severity. Dominant treatment is loss control: CO detection per code, documented alarm tests, boiler maintenance, and immediate evacuation authority. Owner: facilities director, verified by the superintendent.
- Volunteer driving students - unclear frequency, high severity. The exposure is auto liability, negligent supervision, and negligent entrustment, and the district's auto program may exclude pupil transport in private vehicles. Dominant treatment is avoidance plus a written approved-driver policy. Owner: athletic director with HR.
- Missing cash box - high frequency, low severity. Treatment is internal control (dual custody, deposit timing, safe) supported by fidelity coverage. Owner: business manager.
- Reservation-of-rights claim - treatment is claims administration and transfer; late notice is the immediate issue. Owner: business manager as insurance liaison.
The first register entry needs: exposure description, location or activity, frequency and severity estimate, existing controls, selected treatment, accountable owner, due date, and a metric. The four events coexisted precisely because no one owned any of them.
2. The board asks, 'We have insurance, so aren't we already managing risk?' Draft the response, distinguishing risk control from risk financing, and identify two costs the district is absorbing that never appear on the premium invoice.
Read the worked answer
Insurance is a financing technique: it transfers some financial consequences after a loss occurs. It does not reduce how often losses happen or how severe they are. Risk control changes the exposure itself through avoidance, prevention, reduction, separation, and duplication; risk financing decides who pays, through retention, transfer, or insurance. A district that treats renewal as its risk program has no inspection cycle, no driver qualification file, and no register, so the same small losses recur and the pool experience modification rises.
Costs already being absorbed and invisible on the premium invoice:
- Retained and uninsured loss. The $25,000 deductible, the late-reported claim that may be denied, and any excluded exposure such as a volunteer driving students. Add staff overtime, substitute teachers, and facility downtime.
- Loss-driven future pricing and staff time. Claims history feeds pool assessments, and administrators spend hours on investigation, discovery, and documentation. Reputation and enrollment effects also sit outside the premium.
Recommend a one-page risk appetite statement approved by the board and a quarterly review so insurance becomes one line of the plan, not the plan.