Risk Management and Venture Resilience

Introduction

Bootstrapped and micro-financed ventures operate under conditions of limited capital, uncertain demand, concentrated relationships, and restricted access to formal risk-transfer mechanisms. A large enterprise may absorb a failed product launch, delayed customer payment, or temporary supply disruption through reserves and diversified operations. A microenterprise often cannot. One adverse event can interrupt production, damage creditworthiness, or threaten the founder’s personal livelihood.

Risk management is therefore not an administrative exercise added after financing has been obtained. It is a core entrepreneurial capability. Effective risk management connects financing decisions, operating controls, customer strategy, governance, and contingency planning. Venture resilience is the capacity to anticipate disruption, absorb its initial effects, adapt operations, and recover without destroying the enterprise’s long-term viability.

This chapter examines credit, liquidity, operational, market, fraud, currency, concentration, and refinancing risks. It presents practical controls, stress-testing methods, diversification strategies, and insurance choices suitable for resource-constrained ventures. The central argument is that resilience does not require eliminating uncertainty. It requires making exposure visible, setting tolerances, preparing responses, and learning from adverse events.

Learning Objectives

By the end of this chapter, students should be able to:

1. Distinguish major financial and non-financial risks affecting bootstrapped and micro-financed ventures.
2. Measure liquidity exposure, debt-service capacity, concentration, and basic downside scenarios.
3. Design preventive, detective, and corrective controls appropriate to a small venture.
4. Develop a contingency plan using triggers, responsibilities, and prioritized actions.
5. Evaluate diversification, insurance, financing structure, and technology-enabled risk controls.
6. Critically assess ethical, governance, regulatory, and practical limitations in venture risk management.

1. Risk as an Entrepreneurial Management Problem

Risk is commonly understood as the effect of uncertainty on objectives. In a venture, objectives may include survival, cash generation, repayment, customer service, growth, compliance, and preservation of the founder’s assets. Risk is not synonymous with danger: uncertainty can produce losses or gains. However, the focus of risk management is usually the possibility that an event will prevent the venture from meeting its objectives.

A useful assessment separates three dimensions:

• Likelihood: the estimated probability or frequency of an event.
• Impact: the financial, operational, legal, reputational, or human consequence.
• Velocity: how quickly the consequence becomes material and how much response time is available.

A simple priority score may be used for initial screening:

Here, R_i is the priority score for risk i, L_i is its likelihood score, and I_i is its impact score. If a five-point ordinal scale is used, both variables range from 1 to 5. The score is a management aid, not a probability estimate. It assumes that the scales are defined consistently and that multiplication is appropriate for ranking. A low-likelihood, catastrophic event may deserve priority even when its numerical score is modest.

Risk appetite describes the level and type of exposure the owners are willing to accept in pursuit of objectives. Risk tolerance is the operational boundary that should not be exceeded. For example, a founder may accept variable monthly sales but set a tolerance that cash must never fall below one month of essential operating costs. Risk capacity is the maximum loss the venture can withstand before it becomes insolvent or violates a financing agreement. Capacity is usually lower for a young, highly leveraged venture than for an established firm.

A practical risk register records the risk, cause, event, consequence, owner, existing controls, rating, response, and review date. The register should be short enough to use and specific enough to guide action.

2. A Resilience Architecture for Small Ventures

Resilience can be organized as a cycle:

1. Identify: map financial, operational, market, people, technology, legal, and external exposures.
2. Assess: estimate likelihood, impact, velocity, interdependence, and capacity to respond.
3. Treat: avoid, reduce, transfer, share, accept, or exploit the risk.
4. Prepare: create cash buffers, alternative suppliers, data backups, emergency procedures, and communication plans.
5. Monitor: use indicators and thresholds rather than waiting for a crisis.
6. Learn and adapt: investigate near misses and update controls after events.

The distinction between gross and residual risk is important. Gross risk is exposure before controls; residual risk is exposure after controls. A payment approval limit, for example, may reduce fraud risk but may not address collusion or unauthorized online transfers. Controls should therefore be tested, not merely documented.

Small ventures should apply proportionality. A two-person firm cannot replicate a bank’s compliance department. It can, however, separate payment preparation from payment authorization where feasible, reconcile accounts weekly, use multi-factor authentication, preserve invoices, and review exceptions. Simplicity, consistency, and evidence are more valuable than elaborate policies that nobody follows.

3. Credit Risk and Counterparty Discipline

Credit risk is the possibility that a customer, lender, supplier, platform, or other counterparty will fail to perform a financial obligation. For a small venture, customer default is often more dangerous than reported profit suggests because sales recorded on credit do not immediately provide cash.

Credit exposure should be assessed before extending terms. Relevant information includes customer identity, payment history, order size, references, legal status, dispute history, and dependence on a single buyer. Terms should specify price, delivery, acceptance, due date, late-payment consequences, dispute procedures, and ownership of goods where legally enforceable.

Useful controls include deposits, staged billing, credit limits, shorter terms for new customers, electronic invoicing, early-payment incentives, delivery confirmation, and systematic follow-up. A founder should distinguish a profitable customer from a customer who is merely a large debtor. Large orders can increase risk if they exceed the venture’s capacity to finance production.

Receivables aging is a basic monitoring tool. It classifies unpaid invoices by age, such as current, 1–30 days overdue, 31–60 days, and more than 60 days. Increasing overdue balances may signal customer distress or weak collection processes. Expected credit losses should be considered in pricing and cash planning. Where accounting standards apply, the venture should follow the relevant expected-loss requirements rather than relying only on cash received.

Supplier credit also creates risk. A supplier may demand payment before delivery, reduce a credit line, or fail to deliver after receiving a deposit. Written purchase orders, milestone payments, inspection rights, and alternative suppliers reduce exposure. Personal guarantees require particular caution because they transfer business risk to the founder’s household assets.

4. Liquidity Risk and Cash Survival

Liquidity risk is the possibility that the venture cannot meet obligations when due, even if it is profitable on an accrual basis. It is often the most immediate risk for bootstrapped firms. Rent, wages, taxes, loan installments, and critical suppliers require cash at specific times.

A rolling cash-flow forecast estimates opening cash, expected receipts, payments, financing flows, and closing cash. The basic identity is:

C_t is closing cash in period t, C_t-1 is opening cash, R_t is cash receipts, P_t is cash payments, and F_t is net financing cash flow. All variables must be measured in the same currency and period. The equation is a cash identity, not a profit equation: non-cash depreciation and credit sales are excluded unless they generate cash.

A minimum cash buffer can be expressed as:

E_{ ext{essential}} is essential cash expenditure per period, T_{ ext{coverage}} is the desired number of periods of coverage, and S_{ ext{contingency}} is a separately estimated reserve for urgent events. The measure assumes expenditure estimates are realistic and that the buffer is liquid and accessible. It should not be confused with working capital, which may include inventory and receivables that cannot quickly be converted into cash.

The cash conversion cycle helps identify working-capital pressure:

CCC is the cash conversion cycle in days, DIO is days inventory outstanding, DSO is days sales outstanding, and DPO is days payables outstanding. It assumes the measures are calculated on a consistent basis. A shorter cycle generally reduces financing pressure, but excessively delaying suppliers can damage relationships or cause supply interruption.

For example, suppose a venture has 35 inventory days, 28 receivable days, and 20 payable days. Its cash conversion cycle is 35 + 28 − 20 = 43 days. The firm must finance approximately 43 days between paying for inputs and collecting from customers. If average essential daily cash expenditure is 400 monetary units, a rough operating-funding requirement is 43 × 400 = 17,200, before allowing for seasonality, taxes, and shocks. This is an approximation, not a substitute for a dated cash forecast.

Liquidity controls include weekly bank reconciliation, payment calendars, minimum cash thresholds, staged purchasing, deposit policies, rapid invoicing, inventory discipline, and pre-agreed cost reductions. A contingency plan should identify which expenses can be paused, renegotiated, or reduced without damaging core capability.

5. Operational Risk and Internal Control

Operational risk arises from failed processes, people, systems, premises, suppliers, or external events. Examples include incorrect orders, equipment breakdown, poor-quality inputs, cyberattack, data loss, workplace injury, and the absence of a key employee.

A sound small-business control system contains three layers:

Segregation of duties is a foundational principle. The person who creates a supplier should not, where practical, be the only person who approves payment. In a microenterprise where full separation is impossible, compensating controls include owner review, transaction alerts, monthly external bookkeeping review, and dual authorization for high-value transfers.

Business continuity planning should identify critical activities, dependencies, maximum tolerable downtime, recovery resources, and responsible persons. A continuity plan is stronger when it includes contact lists, alternative premises, backup suppliers, offline copies of essential records, insurance contacts, and a communication protocol. Backups should be tested by restoring files; a backup that cannot be restored is not a reliable control.

Process mapping can reveal single points of failure. A venture that depends on one person to approve payments, operate machinery, manage a digital advertising account, and maintain customer relationships has both key-person and concentration risk. Cross-training and documented procedures improve resilience without requiring major investment.

6. Market, Concentration, and Strategic Risk

Market risk is the possibility that changes in demand, prices, competition, regulation, technology, or customer preferences will reduce revenue or margins. A venture should distinguish temporary volatility from structural deterioration. A short-lived sales decline may require a cash response; a permanent shift in customer behavior may require a revised business model.

Scenario analysis should vary the main drivers rather than merely apply an arbitrary percentage to revenue. Drivers may include customer volume, conversion rate, average order value, price, variable cost, supplier lead time, and collection period. A simple contribution-margin relationship is:

CM is contribution margin per unit, P is selling price per unit, and V is variable cost per unit. Both must use the same currency per unit. If fixed costs are F, the accounting break-even quantity, assuming constant price and variable cost and no capacity constraint, is:

This formula is useful for short-run planning but ignores taxes, financing costs, price changes, step-fixed costs, inventory losses, and uncertainty. It should not be interpreted as a guarantee of cash break-even.

Concentration risk occurs when too much exposure depends on one customer, supplier, lender, product, channel, geography, currency, or employee. Concentration is not always avoidable; a start-up may initially depend on one anchor customer. The appropriate response is to recognize the dependency, negotiate protections, establish milestones for diversification, and maintain a credible fallback.

A simple customer concentration ratio is:

S_k is sales to the largest customer or group of k customers, and S_{ ext{total}} is total sales for the same period. The ratio is descriptive, not a universal safety threshold. A high ratio may be acceptable where contracts are long-term and payment is secure, but dangerous where the relationship is informal and cancellable.

Diversification should be economically justified. Adding unrelated products can increase inventory, quality problems, and management distraction. Better diversification often begins with adjacent customers, suppliers, channels, or products that share capabilities. Contracts may also reduce concentration risk through notice periods, minimum purchases, deposits, or service-level commitments.

7. Fraud, Cybersecurity, and Information Risk

Fraud involves intentional deception for unauthorized benefit. Common exposures include fictitious suppliers, altered invoices, expense fraud, payroll manipulation, account takeover, refund abuse, inventory theft, and collusion. Fraud risk is increased by pressure, opportunity, and rationalization; weak controls create opportunity even when owners trust employees.

Practical measures include:

• verifying changes to supplier bank details through an independent channel;
• using unique passwords and multi-factor authentication;
• limiting administrative access and reviewing it regularly;
• requiring evidence for expenses and matching invoices to delivery records;
• reconciling bank, payment-platform, payroll, and inventory records;
• maintaining an incident-reporting channel without retaliation;
• conducting periodic review of unusual transactions and dormant accounts.

Technology can support anomaly detection, but automated flags are not proof of fraud. False positives can unfairly target employees or customers, while sophisticated fraud may resemble legitimate activity. Human review, documented escalation, privacy protection, and access governance remain necessary. Customer and employee data should be collected only for legitimate purposes, retained appropriately, and protected according to applicable privacy and cybersecurity law.

8. Currency and Interest-Rate Risk

Currency risk affects ventures that import, export, borrow, or receive payments in a foreign currency. If a venture’s costs are denominated in one currency and revenues in another, exchange-rate movements can alter margins and repayment capacity. Natural hedging may be possible when revenues and costs use the same currency or when payment timing is matched.

A basic foreign-currency exposure is:

A_{ ext{foreign}} is the foreign-currency amount and X_{ ext{home/foreign}} is the home-currency price of one unit of foreign currency. Units must be specified carefully. If a venture must pay 10,000 foreign units and the exchange rate is 1.20 home units per foreign unit, the payment equals 12,000 home units. At 1.30, it equals 13,000; the additional 1,000 is an adverse currency movement for the importer.

Responses include quoting in the home currency, shortening quotation validity, matching currency inflows and outflows, negotiating adjustment clauses, maintaining a currency reserve, and using approved forward contracts where affordable and legally suitable. Derivatives can reduce risk but introduce counterparty, liquidity, documentation, and basis risks. A founder should not use complex instruments without understanding the obligation and downside.

Variable-rate debt creates interest-rate risk. Before borrowing, the venture should model a higher rate, a delayed receivable, and a weaker sales period. Fixed-rate debt provides payment certainty but may carry higher initial pricing or early-repayment restrictions. The appropriate structure depends on cash-flow stability, maturity, and the venture’s capacity to absorb variation.

9. Refinancing Risk and Financing Design

Refinancing risk is the possibility that debt cannot be renewed or replaced when it matures, or can be renewed only at unaffordable cost. It is particularly serious when short-term borrowing funds long-lived assets or persistent working-capital needs.

A financing maturity schedule should list principal due, interest, lender conditions, collateral, renewal date, and realistic alternatives. A venture should begin discussions before maturity, not when default is imminent. Alternatives may include retained earnings, equity contributions, supplier terms, asset sales, an approved credit line, or a negotiated restructuring.

Debt-service coverage is often assessed using a ratio such as:

Debt service normally includes scheduled principal and interest for the stated period. The numerator must be defined consistently; lenders may use different measures of cash flow. A ratio above 1 indicates that the defined cash flow exceeds scheduled debt service, but it does not guarantee safety because taxes, capital expenditure, seasonality, and unexpected cash needs may be omitted. The ratio should be tested under downside assumptions.

Responsible financing avoids using debt to conceal an unprofitable business model. It also avoids excessive personal guarantees, unclear variable pricing, balloon payments that have no credible repayment source, and borrowing in a currency that does not match cash inflows. Financing documents should be reviewed for covenants, reporting duties, default triggers, security interests, and restrictions on additional borrowing.

10. Stress Testing and Contingency Planning

Stress testing asks whether the venture can survive specified adverse conditions. It differs from forecasting: a forecast describes the most plausible path, whereas a stress test examines resilience under unfavorable but credible conditions.

A practical stress test might include:

• revenue down 20% for three months;
• customer collections delayed by 30 days;
• input costs up 15%;
• the largest customer lost;
• a key supplier unavailable for four weeks;
• exchange rate moving 10% against the venture;
• interest rate increasing by a stated number of percentage points.

Scenarios may be analyzed individually and jointly. The most useful output is not a single loss number but a decision map: when does cash fall below the minimum buffer, which covenant is threatened, what action is triggered, and who is responsible?

A contingency plan should contain:

1. Trigger indicators: minimum cash, overdue receivables, stock-out rate, failed-payment alerts, or customer-loss events.
2. Immediate actions: freeze discretionary spending, contact lenders, accelerate collections, secure alternative supply, or protect data.
3. Decision authority: named persons with authority to act.
4. Stakeholder communication: employees, customers, suppliers, lenders, insurers, and regulators as appropriate.
5. Recovery priorities: safety, legal compliance, payroll, critical customers, data, and revenue-generating capability.
6. Post-event review: documented causes, control failures, and corrective actions.

Stress tests are limited by the quality of assumptions. They should not create false confidence or predict rare events precisely. Their value lies in revealing vulnerabilities and pre-committing sensible actions.

11. Insurance and Risk Transfer

Insurance transfers specified risks to an insurer in exchange for a premium, subject to policy terms, limits, deductibles, exclusions, conditions, and claims procedures. It is not a replacement for controls. Insurance may be appropriate for risks that are severe, relatively insurable, and difficult for the venture to absorb.

Potential covers include property, business interruption, public or product liability, professional indemnity, commercial vehicle, cyber, employer-related liability, and key-person insurance, depending on jurisdiction and business activity. A venture should assess whether the insured amount reflects replacement cost, whether business interruption coverage includes an adequate indemnity period, and whether exclusions match the actual risk.

Insurance decisions should consider total cost of risk: premiums, deductibles, uncovered losses, prevention expenditure, and potential reputational damage. Misrepresentation or failure to disclose material facts can invalidate coverage. Claims records, asset registers, contracts, photographs, incident logs, and evidence of controls support a claim.

Some risks are better retained. Frequent small losses may cost more to insure than to budget for, while catastrophic liability may warrant transfer. The decision should reflect risk capacity, not only expected financial value.

12. Illustrative Case: Riverbend Foods

Background

Riverbend Foods is an illustrative microenterprise producing packaged sauces. It is owned by two founders and financed through retained earnings, a microloan, and supplier credit. One regional retailer generates 52% of sales. Ingredients are purchased partly in a foreign currency, while most sales are domestic. The venture has strong gross margins but only three weeks of cash coverage.

Problem

The retailer requests 45-day payment terms, while Riverbend’s main ingredient supplier requires payment within 14 days. At the same time, the supplier warns of a possible 12% price increase. The microloan has a six-month maturity date, and the founders have no written contingency plan. One employee controls purchasing, inventory records, and supplier-payment preparation.

Analysis

Riverbend faces interconnected risks. The retailer creates customer concentration and credit exposure. The timing mismatch increases the cash conversion cycle. The foreign-currency ingredient creates currency risk, and the short loan maturity creates refinancing risk. Combining the supplier increase with delayed retailer payment could reduce cash below the minimum operating threshold. The lack of role separation increases fraud and error risk.

Assume monthly essential cash expenditure is 9,000 monetary units. Three weeks of coverage is approximately 0.75 × 9,000 = 6,750, excluding a contingency reserve. If the retailer delays payment by 30 days, Riverbend must finance an additional month of receipts. This may exceed its available cash even though the retailer remains commercially successful.

Approach and solution

The founders implement a staged plan:

• negotiate a 20% deposit and milestone billing for new retailer orders;
• cap the retailer’s unpaid balance at an approved credit limit;
• seek a second regional customer and a small direct-to-consumer channel;
• request a supplier price-lock period and obtain a domestic alternative;
• quote future orders with a documented foreign-currency adjustment clause;
• prepare a 13-week rolling cash forecast;
• separate purchase approval, goods receipt, and payment authorization;
• introduce weekly bank and inventory reconciliations;
• meet the lender 90 days before maturity and prepare a retained-earnings repayment option;
• obtain product-liability and business-interruption quotations;
• test data backups and document production procedures.

A stress test assumes sales from the retailer fall by 25%, ingredient costs rise 12%, and collections are delayed by 30 days. The founders identify discretionary marketing expenditure that can be paused, a minimum viable production schedule, and a trigger requiring lender contact when projected cash falls below 10,000 units.

Outcome

In this illustrative scenario, Riverbend does not eliminate its largest customer or all currency exposure. Instead, it reduces dependence, improves payment timing, creates an alternative supply route, and obtains earlier visibility of a cash shortfall. The lender extends the maturity only after receiving the cash forecast and updated controls. The venture’s resilience improves because decisions are linked to measurable triggers rather than optimism.

Learning points

First, risks are interconnected: a customer-term decision can become a liquidity and refinancing problem. Second, diversification should build on existing capabilities. Third, controls must address both honest mistakes and intentional misuse. Fourth, early communication with lenders and suppliers preserves options. Finally, resilience is demonstrated by response capacity, not by the absence of adverse events.

13. Governance, Ethics, and Regulatory Responsibilities

Risk management can create ethical tension. A venture may be tempted to hide declining sales from lenders, misrepresent insurance information, delay employee wages while paying owners, sell unsafe products, or use customer data without informed authorization. Such actions may create short-term liquidity but increase legal, reputational, and human harm.

Founders have responsibilities to creditors, employees, customers, suppliers, investors, regulators, and communities. Accurate records, truthful financing applications, timely tax compliance, fair treatment of workers, product safety, and responsible data handling are core governance duties. Where insolvency is possible, local law may impose duties concerning preference payments, asset transfers, and trading while unable to pay debts. Professional legal and accounting advice should be obtained when such conditions arise.

A proportionate governance system may include a monthly risk review, documented decisions for major commitments, conflict-of-interest declarations, approval thresholds, incident reporting, and an annual insurance and financing review. Governance is not bureaucracy for its own sake; it protects decision quality when pressure is highest.

14. Contemporary Developments and Critical Limitations

Digital payment systems, cloud accounting, open banking, automated credit scoring, and artificial intelligence can improve visibility and speed. AI may identify unusual transactions, forecast demand, classify expenses, or summarize contracts. However, automated systems depend on data quality and may reproduce bias, misclassify legitimate transactions, expose confidential information, or generate confident but incorrect recommendations. Human accountability, access controls, audit trails, and validation remain essential.

Micro-finance itself can create both inclusion and vulnerability. Frequent repayment schedules may discipline cash management but can pressure borrowers with irregular income. Digital lenders may increase access while imposing opaque pricing, aggressive collection, or data-privacy risks. Entrepreneurs should compare total cost, effective repayment burden, collateral, penalties, and dispute rights rather than focus only on the advertised interest rate.

Risk models also have limits. Historical data may not represent a new venture or a structural market change. A numerical score can conceal dependencies between risks. Diversification can fail when all exposures depend on the same platform, geography, or macroeconomic condition. Resilience planning must therefore combine quantitative analysis with judgment, stakeholder consultation, and scenario imagination.

Best-Practice Checklist

A graduate-level practitioner should be able to recommend the following minimum system for a resource-constrained venture:

• maintain a dated rolling cash forecast and minimum-cash threshold;
• review receivables aging, debt obligations, and refinancing dates;
• document customer and supplier terms and set exposure limits;
• identify critical processes, people, assets, and suppliers;
• apply preventive, detective, and corrective controls;
• use multi-factor authentication, tested backups, and access reviews;
• monitor concentration in customers, suppliers, channels, currencies, and lenders;
• stress-test plausible combined shocks;
• maintain a written, trigger-based contingency plan;
• review insurance, exclusions, deductibles, and evidence requirements;
• communicate early and truthfully with stakeholders;
• record incidents and learn from near misses.

Chapter Summary

Risk management is a central capability in bootstrapped and micro-financed ventures because limited reserves make adverse events immediately consequential. Credit risk concerns counterparty performance; liquidity risk concerns the timing of cash; operational risk concerns failed processes and resources; market risk concerns changes in demand, prices, competition, and technology; fraud risk concerns intentional deception; currency risk concerns exchange-rate movements; concentration risk concerns dependence on a narrow exposure; and refinancing risk concerns the renewal or replacement of maturing finance.

Effective resilience combines risk registers, proportional internal controls, rolling cash forecasts, working-capital discipline, diversification, insurance, stress testing, and contingency planning. Important tools include the cash identity, cash conversion cycle, contribution margin and break-even analysis, concentration ratios, and debt-service coverage. These measures require consistent definitions and should be interpreted with judgment rather than treated as guarantees.

The strongest venture responses are anticipatory. They set thresholds, assign responsibility, preserve options, communicate early, and learn after incidents. Technology can improve detection and forecasting but cannot replace governance, ethical judgment, or accountability. Resilience is ultimately the capacity to absorb disruption while protecting people, obligations, critical capability, and the venture’s ability to adapt.

Key Terms

Business continuity: Planned capability to maintain or restore critical operations after disruption.

Cash conversion cycle: Time between paying for inputs and collecting cash from customers.

Concentration risk: Exposure created by dependence on one or a small number of counterparties, products, channels, or resources.

Contingency plan: Predefined actions and responsibilities for responding to adverse events.

Credit risk: Possibility that a counterparty will fail to meet a financial obligation.

Debt-service coverage ratio: Cash available for debt service divided by debt service due.

Diversification: Deliberate reduction of dependence by spreading exposure across compatible alternatives.

Expected credit loss: Estimated loss arising from the possibility that a financial receivable will not be collected fully.

Fraud risk: Possibility of intentional deception producing unauthorized benefit or loss.

Gross risk: Exposure assessed before considering controls.

Liquidity risk: Possibility of being unable to meet obligations when due.

Operational risk: Loss arising from failed processes, people, systems, assets, or external events.

Residual risk: Exposure remaining after controls and other treatments.

Refinancing risk: Possibility that maturing finance cannot be renewed or replaced affordably.

Risk appetite: Overall level and type of risk an organization is willing to pursue or retain.

Risk capacity: Maximum loss the venture can absorb without unacceptable failure.

Risk register: Structured record of identified risks, controls, owners, ratings, and responses.

Stress testing: Analysis of performance and survival under adverse but plausible conditions.

Transfer: Treatment that shifts specified risk to another party, commonly through insurance or contract.

Velocity: Speed at which a risk event produces material consequences.

Review Questions

Short Answer Questions

1. Distinguish risk appetite, risk tolerance, and risk capacity.
2. Why can a profitable venture still experience liquidity failure?
3. Identify one preventive, one detective, and one corrective control.
4. What does customer concentration indicate, and why is it not automatically unacceptable?
5. Explain why a stress test differs from a normal financial forecast.

Long Answer Questions

1. Explain how credit risk, liquidity risk, and refinancing risk can reinforce one another in a micro-financed venture.
2. Design a proportionate internal-control system for a three-person enterprise with online payments and inventory.
3. Evaluate the advantages and limitations of diversification as a response to market and concentration risk.
4. Discuss the role of insurance in a venture’s risk-treatment strategy, including exclusions and deductibles.
5. Critically assess the benefits and governance risks of AI-supported fraud detection for small businesses.

Analytical / Application Questions

1. A venture has 40 inventory days, 32 receivable days, and 25 payable days. Calculate its cash conversion cycle and explain two actions that could reduce financing pressure.
2. A firm’s largest customer accounts for 58% of sales and requests 60-day terms instead of 30-day terms. Construct a risk response combining credit controls, liquidity planning, and diversification.
3. Develop a three-scenario stress test for a venture exposed to foreign-currency input costs, a variable-rate microloan, and one dominant supplier. Specify assumptions, trigger indicators, and management actions.

Multiple Choice Questions with Answers

Question 1

Which statement best describes liquidity risk?

A. The possibility that a customer will reject a product for quality reasons

B. The possibility that obligations cannot be paid when due

C. The possibility that a currency will appreciate

D. The possibility that a supplier will offer a discount

Correct Answer: B. The possibility that obligations cannot be paid when due

Question 2

A venture has 35 inventory days, 28 receivable days, and 20 payable days. What is its cash conversion cycle?

A. 23 days

B. 43 days

C. 63 days

D. 83 days

Correct Answer: B. 43 days

Question 3

Which is a detective control?

A. Setting a payment approval limit

B. Using multi-factor authentication before login

C. Reconciling the bank account to recorded transactions

D. Creating an alternative supplier arrangement

Correct Answer: C. Reconciling the bank account to recorded transactions

Question 4

If a customer generates 52% of total sales, this primarily indicates which risk?

A. Concentration risk

B. Interest-rate risk

C. Physical security risk

D. Depreciation risk

Correct Answer: A. Concentration risk

Question 5

What is the principal purpose of stress testing?

A. To predict the exact date of the next crisis

B. To examine resilience under adverse but plausible conditions

C. To replace all financial forecasting

D. To guarantee loan approval

Correct Answer: B. To examine resilience under adverse but plausible conditions

Question 6

An importer must pay 10,000 foreign currency units at an exchange rate of 1.20 home units per foreign unit. What is the home-currency payment?

A. 8,333 home units

B. 10,000 home units

C. 11,200 home units

D. 12,000 home units

Correct Answer: D. 12,000 home units

Question 7

Which action most directly reduces refinancing risk?

A. Ignoring the maturity date until the loan expires

B. Beginning lender discussions well before maturity and preparing alternatives

C. Increasing dependence on one short-term lender

D. Using all cash reserves for discretionary expansion

Correct Answer: B. Beginning lender discussions well before maturity and preparing alternatives

Question 8

What is a key limitation of a simple risk-priority score based on likelihood multiplied by impact?

A. It cannot rank any risks

B. It treats every risk as certain

C. It may understate rare catastrophic events and ignores other dimensions such as velocity

D. It can only be used for currency risk

Correct Answer: C. It may understate rare catastrophic events and ignores other dimensions such as velocity

Question 9

Which insurance principle is most accurate?

A. Insurance eliminates the need for operational controls

B. Insurance transfers specified risks subject to terms, limits, exclusions, and deductibles

C. Insurance covers every loss suffered by a business

D. Insurance guarantees recovery of lost reputation

Correct Answer: B. Insurance transfers specified risks subject to terms, limits, exclusions, and deductibles

Question 10

A venture has cash available for debt service of 18,000 and debt service due of 15,000 for a period. What is its DSCR?

A. 0.83

B. 1.00

C. 1.20

D. 3.00

Correct Answer: C. 1.20