Total Cost of Risk (TCR) is the sum of everything insurance actually costs your business — premium plus retained losses plus risk control spending plus administration — not just the number on your renewal proposal. When business owners shop on premium alone, they’re optimizing one line item while ignoring the three that often add up to more.
I started Avanti because I kept watching well-run Iowa business owners get talked into the cheapest premium and find out at the worst possible moment that the savings were illusory. The premium went down. The retained loss went up. The administrative time went up. The risk control credits went unclaimed. The total cost of risk quietly climbed even as the renewal “looked” better. That pattern is so common it’s the reason we run a Business Risk Diagnostic™ before we recommend any commercial coverage — we want to see all four numbers, not just one.
What is Total Cost of Risk?
Total Cost of Risk is a financial metric that captures the full economic cost of an organization’s risk exposure across four categories: insurance premiums, retained losses, risk control investments, and administrative expense. It’s the standard way professional risk managers and corporate insurance buyers measure how much risk is actually costing the business. It should be the standard way every business owner measures it too.
The four components, in plain English:
- Insurance premium. The dollars you pay carriers each year for the policies you buy. This is the only number most owners track.
- Retained losses. The dollars that come out of your pocket — deductibles, self-insured retentions, uninsured losses, claims under sub-limits, the difference between what a policy paid and what the loss actually cost. If you have a $25,000 deductible and a $40,000 loss, $25,000 of that is a retained loss.
- Risk control. Everything you spend to prevent or reduce loss frequency and severity — safety programs, training, MVR services, cybersecurity tooling, ergonomic equipment, fleet telematics, posted policies, third-party safety audits.
- Administration. The internal time and external services that go into managing the program — claims handling, broker fees, audit prep, certificate management, contract review, premium financing interest.
Add the four together and you have TCR. The number is almost always materially higher than premium alone, and the gap between TCR and premium tells you where the leverage actually is.
Why focusing on premium alone misleads
Here’s the worked example I use most often. Two Iowa contractors, similar size, similar exposure, both shopping for a commercial program.
Contractor A takes the cheapest quote — a $42,000 premium with a $5,000 deductible across the board, a thin General Liability form with several manuscript exclusions, and no documented workers’ compensation loss-control program. They feel good about saving $8,000 against last year’s renewal. Over the policy year they have a slip-and-fall on a job site that triggers their deductible, a workers’ compensation claim that pushes their experience modifier up 18 points the following year (worth roughly $14,000 of additional premium), an additional-insured certificate dispute on a sub’s claim that they end up paying $11,000 to settle outside the policy, and 60 hours of office time managing it all.
Their actual TCR for the year: roughly $42,000 premium + $5,000 deductible + $14,000 future-year mod cost + $11,000 uncovered settlement + $4,500 internal admin time + a low single-digit thousands in unfunded risk control = about $77,000 of cost against a $42,000 premium they were celebrating.
Contractor B takes a different path. Premium comes in at $48,000 — $6,000 more than the cheapest option — but the program is built around a documented safety program (which earned a credit), the GL form is broader, the certificate management is handled by their broker, and the workers’ comp program includes a return-to-work protocol that keeps frequency claims out of the experience period. They have one comparable workers’ comp claim that costs them their $5,000 deductible. Their experience mod doesn’t move because the claim closes quickly and the RTW program documented modified duty.
Their actual TCR: roughly $48,000 premium + $5,000 deductible + $0 future-year mod increase + $0 uncovered loss + $1,800 internal admin time + roughly $3,000 funded risk control = about $57,800 of cost.
Contractor B paid $6,000 more in premium and saved roughly $19,000 in TCR. The cheap quote was the expensive policy. This is not a hypothetical pattern — it’s what we see in Iowa workers’ compensation accounts every year.
Where the leverage actually is
Once you start measuring TCR, the levers become obvious:
- Risk control is the highest-return investment in the program. Every dollar of frequency you eliminate compounds — it removes the deductible, it removes the experience mod impact, it removes the administrative drag, and it usually unlocks a premium credit. Funded risk control routinely returns 3–5x its cost.
- Retained losses are the line you control most directly. Choosing the right deductible structure, the right self-insured retention, the right captive participation if you qualify — these decisions have more swing than the premium itself.
- Administration is invisible until you measure it. When the broker is doing the certificate work, the audit prep, the contract review, and the claims advocacy, your internal cost drops. When you’re doing it, the time is real and it isn’t on the renewal proposal.
- Premium is downstream. The premium falls into place after the other three are dialed in. Carriers price what they see. A clean program with documented controls and clean loss runs prices itself.
How a captive shifts the equation
For Iowa businesses paying $250,000 or more annually in workers’ comp, general liability, and auto liability, a P&C group captive changes the math entirely. In a guaranteed-cost program, the carrier keeps the underwriting profit when losses are low. In a captive, that profit is yours. The retained-loss line goes up (you’re funding your own loss layer), but the premium line goes down, the risk control investment becomes a direct return on your own balance sheet, and the long-run TCR drops materially for businesses that run clean operations.
Captives aren’t right for every business. They are right for the ones that combine premium scale, loss discipline, and a leadership team that’s willing to think about insurance as a five-year balance-sheet decision rather than a twelve-month line item.
The Business Risk Diagnostic™
We don’t lead with a quote. Before we recommend any commercial coverage, we run a Business Risk Diagnostic™ — a structured pre-quote audit that maps your actual exposures, stress-tests your existing program against real claim scenarios, and surfaces the four TCR components so you can see what insurance is actually costing you, not just what the renewal proposal says. For most businesses we work with, the Diagnostic identifies five to fifteen percent of TCR that wasn’t visible before — usually a combination of mis-structured retained loss, missing risk control credits, and administrative cost that the right program absorbs.
If you’ve been shopping on premium and your renewal “looks” similar to last year, the Diagnostic is the way to see whether the program is actually costing you more.
Start a Business Risk Diagnostic →
Frequently asked questions
What does Total Cost of Risk include?
TCR includes four categories: insurance premium, retained losses (deductibles, SIRs, uninsured losses, sub-limited claims), risk control spending (safety programs, training, technology, audits), and administrative expense (internal time, broker fees, claims handling, certificate management).
How is Total Cost of Risk calculated?
Add your annual insurance premium, your retained losses for the year, your risk control investments, and your internal and external administrative cost. The sum is your TCR. Most businesses are surprised by how much higher the number is than premium alone.
Why is premium alone a poor measure of insurance cost?
Premium is one of four cost categories. Optimizing premium often shifts cost into retained losses or administration, which are larger and less visible. Buyers who shop on premium frequently end up with a higher TCR even when the new premium is lower.
How can a business reduce its Total Cost of Risk?
The fastest reductions come from funded risk control, smarter retention structures (deductibles and SIRs sized to actual loss patterns), and consolidating administrative work with a broker that handles claims advocacy, certificates, and audit prep. For businesses paying $250K+ in P&C premium, captive programs can structurally lower TCR.
Is Total Cost of Risk only relevant for large companies?
No. The framework scales down to any business that buys commercial insurance. The dollar amounts are smaller for small operators, but the relationships between the four categories are identical — and the leverage of risk control versus premium is often even higher for small and mid-sized businesses.
Related reading
Other articles in the Commercial Foundations series:
- Captive vs Guaranteed Cost vs Large Deductible: Risk Financing Compared — Three risk financing structures side by side—when each one fits and when it stops making sense.
- Why the Cheapest Commercial Quote Is Usually the Most Expensive Policy — Three Iowa-style scenarios where the lowest premium hid the largest gap.
- Coinsurance Penalties on Commercial Property: The Clause That Quietly Cuts Claim Checks — How the coinsurance formula trims a claim check when valuation drifts.