#risk-management
Strategies for identifying and mitigating business risks including insurance
Nearly 40 states cap emergency price increases — California at 10% above your own pre-emergency price — and most statutes require no proof of bad intent, only an increase past the threshold. Penalties reach $5,000 per violation in North Carolina and $20,000 in Texas, and the cost-justification defense works only if dated price snapshots and supplier invoices already exist.
A certificate of insurance you cannot produce on audit day turns subcontractor payments into your own payroll, billed at your trade rates. Here are the seven things every subcontractor COI must show, the five triggers for demanding a new one, and why certificate holder status is not the same as being an additional insured.
Commercial property pricing fell 7.1% in Q1 2026 and another 8.1% in Q2 while general liability kept rising, so a flat renewal premium can hide thinner coverage. A seven-step playbook for shopping the renewal — updated statements of value, coinsurance math, apples-to-apples quote comparisons — plus how to book premiums by line and location so you can prove the decrease actually showed up.
SBA rules require an unlimited personal guarantee from every owner holding 20% or more, and 59% of small businesses with debt have pledged one. Here is what SBA Form 148 actually obligates you to, the five traps founders miss — including guarantees that outlive your ownership — and the caps, burn-offs and release letters worth negotiating before you sign.
Public adjusters work for the policyholder, not the insurer, and typically charge 5%–15% of the settlement, with many states capping standard claims near 15%–20% and declared-disaster claims near 10%. This guide covers verifying a license and surety bond, which fee structures to question before signing, and how to book proceeds — claim receivable, gain or loss against net book value, and business-interruption income recognized at settlement.
FDIC insurance covers $250,000 per depositor, per bank, per ownership category — so an $800,000 business account leaves $550,000 uninsured. Reciprocal deposit networks like IntraFi's ICS and CDARS split a large balance into under-limit chunks across thousands of member banks while you keep one relationship and one statement. Here are the mechanics, the costs, ICS vs. CDARS, the overlap trap that quietly leaves money uninsured, and the bookkeeping that proves your coverage.
Illinois's Artificial Intelligence Safety Measures Act, signed July 6, 2026, requires frontier AI developers with over $500M revenue to publish catastrophic-risk frameworks, pass annual independent audits, and report safety incidents within 72 hours starting January 1, 2028. This guide breaks down the five obligations, audit costs of $25,000–$150,000+, and a 16-month preparation timeline for startups.
On January 1, 2026, at least six states — Colorado, Connecticut, Maine, Minnesota, Vermont, and Washington — began enforcing bans or reporting rules on products with intentionally added PFAS, and the laws reach anyone who sells or distributes covered goods, not just manufacturers. A state-by-state guide for retailers covering affected categories, supplier certifications, ship-to-state segmentation, and the bookkeeping for compliance costs and inventory write-downs.
Cyber underwriters in 2026 condition or decline coverage on five control families — MFA on all email, remote and admin access, EDR on roughly 95% or more of endpoints, immutable backups with dated restore tests, patching and privileged-access hygiene, and an incident response plan exercised within 12 months. This guide lists the evidence each control needs, four methods for sizing limits against revenue, records, regulators and contracts, typical small-business premiums, and seven mistakes that fail assessments.
Malware disguised as popular AI tools hit small and mid-sized businesses more than 33,300 times in the first four months of 2026, nearly five times the 2025 count. Learn the five disguises most likely to reach your team, what one bad download costs, a shareable download-safety checklist, and a 15-minute software-approval routine that stops most fake installers.
California's AI Transparency Act (SB 942) became operative on August 2, 2026 after AB 853 pushed back its January start. Generative AI providers with more than one million monthly California visitors or users must offer a free detection tool with upload, URL and API intake, an optional visible label, and a mandatory latent watermark, revoke licenses within 96 hours of discovering tampering, and face $5,000 per violation per day. This guide covers who is a covered provider, the 2027 platform and 2028 capture-device phase-ins, a compliance checklist, and how to budget and book the program.
If a payroll company withdraws your tax money and never deposits it, the employer still owes the full tax plus penalties. A payroll service provider or reporting agent assumes no liability, a Section 3504 agent shares it, and only an IRS-certified CPEO is solely liable for its work-site employees. This guide covers the Trust Fund Recovery Penalty that reaches owners personally, seven warning signs of a failing provider, and the monthly EFTPS verification habit that catches a missed deposit at a 2% penalty instead of 10%.
