#risk-management
Risk Management
Strategies for identifying and mitigating business risks including insurance
Cyber Insurance for Small Businesses: The Coverage Gaps That Blindside Owners
Only 38% of small businesses carry cyber insurance, 44% of insured ones are underinsured, and nearly half of claims are denied or closed without payment. A guide to the ransomware sublimits, social engineering caps, and security-control requirements that determine whether a policy actually pays.
Cyber Insurance for Small Businesses in 2026: What It Costs, What It Covers, and Where Claims Get Denied
Small business cyber insurance runs roughly $400–$1,600 a year for a $1 million limit, while the average breach recovery costs $120,000 and downtime $53,000 an hour. A guide to first-party vs. third-party coverage, 2026 premium drivers, and the social-engineering sublimits and MFA requirements that most often sink claims.
CCRC Entrance Fee Accounting: Deferred Revenue, the Future Service Obligation, and the $190 Million Refund Problem
Since 2020, at least 16 CCRC bankruptcies have cost residents an estimated $190 million in unpaid entrance-fee refunds. Here is how continuing care retirement communities actually account for entrance fees — deferred-revenue amortization, the actuarially computed Future Service Obligation (FSO) liability, and the re-occupancy dependency that can make a community look solvent on paper right up until it fails.
Check Fraud Is Still the #1 Payment Threat in 2026 — Here's What to Do About It
The 2026 AFP Payments Fraud Survey found 76% of U.S. organizations faced payment fraud in 2025, with paper checks the top target at 58% — ahead of ACH debits (30%) and wires (25%). Here's a practical small-business defense checklist, from Positive Pay and ACH filters to callback verification and weekly reconciliation.
FASB Just Made It Easier to Hedge Variable-Rate Debt — Here's What Changed
FASB's ASU 2025-09, issued November 2025, makes five targeted fixes to hedge accounting: a 'similar risk' standard for grouped cash flow hedges, a 'choose-your-rate' framework for variable-rate debt, broader nonfinancial asset hedge eligibility, simpler net written option rules, and dual hedge mismatch relief. Public companies must comply for periods beginning after December 15, 2026; private companies get until after December 15, 2027, with early adoption permitted.
Iowa's Captive Insurance Overhaul: What H.F. 2766's $100,000 Protected Cell Minimum Means for Small Businesses
Iowa's H.F. 2766, effective July 1, 2026, cuts the minimum capital for protected cell captives to $100,000, allows LLC and series LLC cells, and waives premium tax for captives that redomesticate. Here's when a captive pencils out for a small business — and how to spot abusive micro-captive tax shelters.
Bookkeeping for Medical Device Reprocessors: When the FDA Calls You a Manufacturer
Third-party reprocessors of single-use medical devices are regulated as full manufacturers under the FDA's QMSR (effective February 2, 2026) — same 510(k), MDR, and UDI obligations as the OEM. That reshapes the books; a three-stage inventory split, per-device-family COGS, recurring validation expenses, and product liability reserves sized by risk class.
New York's FAIR Business Practices Act: What the 2026 'Unfair and Abusive' Standard Means for Small Businesses
New York's FAIR Business Practices Act, effective February 17, 2026, adds "unfair" and "abusive" conduct standards to GBL Section 349, extends protection to small businesses and non-profits, and carries penalties up to $5,000 per violation — or $15,000 for willful ones. Here is what changed, who enforces it, and a seven-step compliance checklist for any business selling to New York customers.
The Agri Stats Consent Decree: New Antitrust Rules for Benchmarking and Industry Data Sharing
The DOJ's May 2026 consent decree with Agri Stats sets concrete rules for lawful benchmarking — pricing data must average 45+ days old, output data 90+ days, reports must be quartile-aggregated and equally available to all buyers. Here's what the settlement means for any small business in a trade-association survey or industry pricing dashboard.
The BIS Affiliates Rule: What 50% Ownership Means for Small Exporters Before November 2026
Starting November 10, 2026, the BIS Affiliates Rule extends Entity List and MEU List restrictions to any company 50% or more owned by listed entities — aggregated across owners and traced through corporate layers. Here's what small exporters need to do about screening, Red Flag 29, and documentation before the stay ends.
When the CPSC Recalls Your Inventory: A Bookkeeping Guide for E-Commerce Resellers
Under the Consumer Product Safety Act, selling recalled products is illegal regardless of business size — and Amazon can bill recall refunds back to third-party sellers. This guide covers the three bookkeeping steps a recall triggers for e-commerce resellers — writing recalled inventory off the balance sheet under GAAP, recording reimbursements separately from revenue, and documenting disposal — plus why the accounting write-off and the IRS tax deduction often land in different periods.
DOL FAB 2026-01: What EBSA's Duty-of-Loyalty Enforcement Shift Means for Small 401(k) Plan Sponsors
EBSA's Field Assistance Bulletin 2026-01 prioritizes duty-of-loyalty and prohibited-transaction cases over process-based prudence claims, and caps routine ERISA investigations at 18 months (30 for complex ones). Here's what small-business 401(k) sponsors should document to stay protected.