CSRM study materials
CSRM study resources

CSRM: Handling School Risks: Treatment, Controls, and Contractual Transfer

CSRM · Work through your exam, one topic at a time.

All guide sections

Handling School Risks: Treatment, Controls, and Contractual Transfer

Handling School Risks tests the treatment options, the hierarchy of controls, school-specific safety programs, and contractual risk transfer. Questions often ask which treatment is being used or what is missing from a facility-use agreement.

Core rules and concepts

  • Treatment options are avoidance, reduction through prevention and mitigation, transfer, retention, and sharing. Most programs combine several.
  • The control hierarchy runs from elimination and substitution to engineering controls, administrative controls, and finally personal protective equipment. Engineering outranks training. Training alone is a weak control.
  • Classify controls as preventive, detective, or corrective, and document who performs each and how often.
  • School controls include supervision ratios; playground inspections and surfacing depth; automated external defibrillators and emergency action plans; concussion and heat protocols; chemical hygiene in science labs; machine guarding in career and technical shops; allergen management in food service; driver qualification, drug testing, and vehicle maintenance in transportation; volunteer screening and background checks; access control and crime prevention through environmental design; cybersecurity measures such as multi-factor authentication, patching, phishing training, and tested backups; and drills and reunification exercises.
  • Contractual transfer uses indemnification and hold-harmless clauses, additional insured status, waiver of subrogation, primary and non-contributory wording, certificates of insurance, and review before signature.
  • Waivers and releases signed for minors are often limited by state law and do not transfer every liability. They never replace supervision.
  • Insurance transfers financial consequence, not the risk itself. Deductibles and exclusions leave retained risk.
  • Incident response: report promptly, preserve evidence, make no admissions, notify the broker and insurer, cooperate, review root cause, and track corrective actions to closure.
  • Continuity planning needs a crisis communication plan, a designated spokesperson, parent notification procedures, and tabletop exercises with after-action reviews.

Worked example

A community youth group wants Saturday gym access. The facility-use agreement requires one million dollars per occurrence and two million aggregate general liability, the district named as additional insured on a primary and non-contributory basis, indemnification, and a certificate of insurance ten days before first use. Staff verify the additional insured endorsement, not just the certificate. The group then hires an inflatable vendor, which must supply its own certificate and additional insured status. Residual risk remains: the district deductible and any gap if the group policy is voided for misrepresentation are retained, not transferred.

Traps that cost marks

Calling insurance elimination of risk. Accepting a certificate as proof of coverage. Failing to verify the additional insured endorsement. Treating a waiver for a minor as a complete defense. Forgetting subcontractors and vendors of vendors. Relying on training as the only control. Leaving corrective actions untracked.