Business Interruption and Operational Resilience

Introduction and context

Property damage is visible, measurable and usually located at a defined insured site. Business interruption (BI) is different: a fire, flood, cyber incident, equipment failure, utility outage or supplier loss may interrupt an economic system whose assets, people, information, markets and dependencies extend well beyond the damaged premises. The resulting loss may continue after physical repairs because customers have moved, regulatory approvals are delayed, specialist machinery is unavailable, or supply chains remain disrupted.

For insurance managers, the central task is therefore not simply to estimate the value of buildings and contents. It is to understand how the organisation creates revenue, what resources those activities require, how quickly capacity can be restored, and how a loss at one location can affect other locations or trading partners. Business interruption analysis connects operational risk engineering with policy design, financial modelling, continuity planning and claims preparation.

Operational resilience is the capability to continue delivering important products or services within acceptable limits during disruption. It is broader than business continuity. Business continuity generally concerns planned responses and recovery arrangements; operational resilience also examines whether the operating model, technology, governance and third-party ecosystem can withstand severe but plausible disruption.

Learning objectives

By the end of this chapter, the reader should be able to:

1. Map critical processes, dependencies, utilities, suppliers and concentrations.
2. Distinguish business interruption, contingent business interruption and related time-element exposures.
3. Calculate maximum indemnity periods and estimate gross profit, revenue and increased-cost exposures.
4. Evaluate business continuity, disaster recovery, alternative capacity and supply-chain resilience.
5. Assess bottlenecks, single points of failure, geographic concentrations and recovery assumptions.
6. Recommend insurance, engineering and governance improvements using evidence rather than optimistic assumptions.

1. The architecture of interruption exposure

1.1 From hazard to financial loss

A useful causal chain is:

Hazard → damage or loss of availability → process disruption → output or service reduction → financial consequence → mitigation and recovery.

The hazard may be fire, natural catastrophe, machinery breakdown, contamination, epidemic, cyberattack, labour disruption, political violence or supplier insolvency. Damage is not always physical. A cloud service may be unavailable without damage to the insured’s premises; a product may be unusable because of contamination; a regulator may suspend operations; or a transportation network may be inaccessible.

The financial consequence may include:

• lost sales or fees;
• continuing fixed costs;
• additional expenditure to reduce the loss;
• costs of temporary premises, equipment, logistics or labour;
• loss of market position and customer confidence;
• contractual penalties or service credits;
• extra expense incurred by customers or suppliers;
• dependent-property losses affecting the insured’s own income.

Insurance analysis must separate physical damage from the time element. A property may be repaired quickly, yet the business may take much longer to regain normal output. Conversely, a serious-looking property loss may create little BI loss where inventory, capacity and customers can be transferred immediately.

1.2 Important categories of time-element loss

Coverage depends on the policy trigger, insured perils, defined premises, dependent-property wording, waiting periods, sublimits, exclusions and causation provisions. Operational analysis cannot substitute for policy interpretation, but it identifies where wording and limits may be inadequate.

2. Mapping critical processes and dependencies

2.1 Process mapping as risk engineering

A process map should show how an organisation transforms inputs into products or services and cash flow. A high-level map is useful for communication, but risk assessment requires sufficient detail to identify bottlenecks. For each critical process, document:

• process owner and location;
• output and internal or external customer;
• required people, skills, equipment, premises and information;
• utilities and technology;
• inbound materials and outbound logistics;
• minimum acceptable service level;
• maximum tolerable period of disruption (MTPD);
• recovery time objective (RTO);
• recovery point objective (RPO) for data;
• substitutes and manual workarounds;
• dependencies on suppliers, customers and shared services.

The MTPD is the longest period an activity can be unavailable before unacceptable harm occurs. The RTO is the target time to restore a process or service after disruption. The RPO is the maximum tolerable amount of data loss measured in time. These are related but not interchangeable: an application may have an RTO of eight hours and an RPO of fifteen minutes, while the business process may tolerate disruption for two days.

2.2 Dependency classification

Dependencies should be classified by both type and concentration. Common types include:

1. Physical: buildings, production lines, warehouses, roads and ports.
2. Utility: electricity, water, gas, steam, refrigeration and telecommunications.
3. Technological: software, data centres, cloud platforms, networks, identity services and industrial control systems.
4. Human: specialised operators, engineers, maintenance contractors and decision-makers.
5. Material: raw materials, components, packaging and spare parts.
6. Commercial: key customers, distributors, agents, payment systems and marketplaces.
7. Regulatory: licences, certifications, inspections and approvals.
8. Financial: liquidity, credit facilities, payment settlement and insurance recoveries.

A dependency is material when its failure can prevent a critical process from meeting its required service level. The assessment should consider not only whether an alternative exists, but also its capacity, lead time, quality, regulatory acceptability, cost and geographic correlation.

2.3 Concentration and common-cause failure

Concentration is a major source of underestimated exposure. Examples include several facilities in one floodplain, multiple suppliers dependent on the same semiconductor plant, many applications using one cloud region, or different factories sharing a single substation. Apparent diversification may therefore be false diversification.

A practical dependency register should record the supplier or asset, critical input, location, contractual terms, lead time, replacement options, financial strength, relevant hazards and evidence of continuity capability. Site visits, supplier questionnaires, technical audits, purchase data, maintenance records and scenario workshops should be used together. Self-assessment alone tends to overstate resilience.

3. Measuring interruption exposure

3.1 Revenue, gross profit and contribution approaches

The appropriate financial basis depends on the business and policy. A revenue basis measures lost turnover or fees. A gross-profit basis measures the profit contribution that would have been earned from lost sales after deducting insured variable costs. A contribution approach is often useful in management analysis because it focuses on costs that change with output.

Let:

• S = sales or turnover during the interruption period;
• V = insured variable costs that vary with sales;
• GP = gross profit or contribution;
• m = contribution margin ratio.

The basic relationships are:

and, where the ratio is stable,

so that estimated lost contribution is:

These equations assume that the classification of variable costs is consistent, the margin is measured on the same accounting basis as sales, and lost sales can be estimated reliably. Fixed costs that continue during interruption are not deducted as variable costs; they are normally part of the loss of gross profit or contribution, subject to policy wording.

3.2 Indemnity period and recovery curve

The maximum indemnity period (MIP) is the longest period for which the policy may respond to covered interruption, beginning according to the wording and subject to the insured event and other conditions. It should not be selected merely by adding the physical repair estimate to a conventional number of months.

A sound MIP analysis considers:

• debris removal and design time;
• permits, planning and regulatory approvals;
• procurement and fabrication of replacement equipment;
• installation, commissioning and testing;
• availability of skilled labour;
• seasonal demand and production cycles;
• inventory depletion and replenishment;
• customer requalification and lost contracts;
• time required to rebuild market share;
• access to alternative sites and suppliers;
• worst credible rather than average restoration conditions.

Recovery is usually gradual. If Q(t) is the proportion of normal capacity available at time t, then lost contribution over a period can be represented as:

where L is interruption loss, C(t) is normal contribution per unit of time, T is the selected indemnity horizon, Q(t) ranges from 0 to 1, and E is qualifying increased cost of working net of any savings. The integral notation expresses accumulation over time; in practice, monthly or weekly estimates are often more defensible than false precision.

If contribution is constant and recovery is approximated in discrete periods:

The model is applicable when the recovery percentages and contribution estimates are documented. It should incorporate demand changes, mitigation effects and policy limitations rather than assuming that all lost sales are recoverable.

3.3 Increased cost of working

Additional expenditure is economically justified when it reduces the insured loss. Let K be the additional cost and R the reduction in loss that it achieves. A simple decision rule is:

Subject to policy terms, a more complete comparison includes avoided loss, residual cost, service effects and operational feasibility. Examples include temporary premises, contract manufacturing, expedited freight, overtime, temporary information technology, rental equipment and alternative utilities. Expenditure that creates a permanent capacity improvement or benefits unrelated operations may not be fully recoverable.

3.4 Worked example: manufacturing interruption

An illustrative manufacturer has normal monthly sales of £4.0 million. Insured variable costs are £2.6 million, giving monthly contribution of £1.4 million:

The contribution margin ratio is:

A fire causes complete shutdown for two months. Capacity is restored to 50% in month 3 and 85% in month 4. Assume demand remains available, contribution is proportional to output, and no mitigation cost is yet included.

Suppose temporary production costs £0.25 million and prevents £0.60 million of otherwise lost contribution. The net economic benefit is £0.35 million, because:

The resulting gross exposure before policy deductibles, limits and savings is approximately £3.96 million if the entire cost is qualifying and no other adjustment applies. The example is deliberately simplified. A real calculation would test production mix, overtime premiums, extra raw materials, customer demand, mitigation limits, payroll treatment, trends and policy definitions.

4. Business continuity and disaster recovery

Business continuity management (BCM) establishes how important activities will continue during disruption. Disaster recovery (DR) usually refers more specifically to restoring technology, data, infrastructure or facilities. DR is therefore a component of continuity, not a substitute for it.

A mature BCM cycle includes:

1. Context and governance: define scope, risk appetite, authorities and decision rights.
2. Business impact analysis: identify critical activities, consequences and recovery priorities.
3. Risk assessment: examine hazards, vulnerabilities, dependencies and scenarios.
4. Strategy selection: choose prevention, redundancy, relocation, manual operation, outsourcing or acceptance.
5. Plan development: document procedures, contacts, resources and escalation.
6. Training and exercising: test people and assumptions under realistic conditions.
7. Maintenance and improvement: update plans after changes, incidents and exercises.

A DR plan should distinguish system restoration from business restoration. Restoring an application does not guarantee that people can access it, data are complete, interfaces work, suppliers are available or customers can receive the output. Recovery testing should include identity management, backups, network connectivity, cyber containment, data integrity and manual fallback.

Resilience strategies

Resilience is not equivalent to maximum redundancy. The economically appropriate strategy balances the probability and consequence of disruption against the cost and reliability of controls. A low-probability, high-severity event may justify insurance and tested alternatives; a high-frequency outage may justify engineering prevention and operational redesign.

5. Supply-chain resilience and contingent business interruption

CBI analysis begins with the insured’s critical outputs and traces upstream and downstream dependencies. The analysis should identify tier-one suppliers, but also critical tier-two and tier-three nodes where information is available. A supplier may appear replaceable until its sub-supplier, tooling, certification or raw material is examined.

Important questions include:

• Is the supplier a sole source or merely the preferred source?
• How long would qualification of a substitute take?
• Are tooling, intellectual property or regulatory approvals transferable?
• Does the supplier have tested recovery arrangements?
• Do multiple suppliers share a port, utility, region or sub-supplier?
• Are contractual capacity reservations enforceable during a major event?
• Can inventory cover the full replacement lead time?
• Would an alternative source create quality, safety or reputational concerns?

CBI limits should reflect plausible loss severity rather than the annual purchase value alone. A small component can create a large BI loss if it is a bottleneck. Conversely, a large supplier may produce little CBI loss if inventory and substitutes are available.

Downstream exposure also matters. A major customer’s loss can reduce demand for the insured’s output, while a distributor failure may prevent sales even when production continues. Policy wording may treat customers, suppliers, utilities and access differently; these distinctions should be reviewed with claims and legal specialists.

6. Scenario analysis and quantitative decision-making

A useful scenario programme combines deterministic and probabilistic thinking. Deterministic scenarios ask, “What happens if this defined event occurs?” Examples include a warehouse fire, a six-week power outage, a port closure, a ransomware event or a sole-source supplier failure. Probabilistic analysis asks how often events may occur and how losses vary across a distribution.

For a scenario, analysts should specify:

• initiating event and affected assets;
• duration and geographic extent;
• process consequences;
• recovery path and capacity curve;
• mitigation actions and their lead times;
• financial assumptions;
• insurance response and policy constraints;
• confidence level and uncertainty.

Expected annual loss may be represented simply as:

where pⱼ is the probability of scenario j in the relevant period and Lⱼ is its loss. This is not a substitute for stress testing: a low-probability extreme loss may be financially decisive even if its expected value is modest. Probabilities must be evidence-based and scenario definitions must avoid double counting correlated events.

Monte Carlo models can represent uncertain demand, restoration time, supplier recovery and mitigation effectiveness. However, model sophistication does not correct poor input data. Sensitivity analysis should show which assumptions drive the result, especially MIP, recovery speed, demand retention, margin, supplier replacement time and policy sublimits.

7. Governance, insurance and claims readiness

Operational resilience is a governance responsibility. The board and senior management should approve important service tolerances, risk appetite, investment priorities and escalation thresholds. Business owners should own process assumptions; facilities, IT, procurement, finance, insurance and crisis-management teams should contribute specialist evidence.

Insurance programme design should consider:

• correct statement of values and financial basis;
• realistic MIP and waiting period;
• treatment of trends and demand changes;
• payroll and ordinary payroll provisions;
• increased cost of working and mitigation expenditure;
• service interruption and utility extensions;
• CBI and supplier/customer sublimits;
• denial of access and ingress/egress;
• cyber and non-damage interruption triggers;
• exclusions, deductibles, aggregation and territorial scope.

Claims readiness is a resilience capability. Maintain current asset registers, production records, budgets, sales forecasts, supplier data, utility bills, maintenance records, recovery plans and evidence of mitigation expenditure. Define who preserves data and authorises emergency spending. Early loss quantification should distinguish actual results from counterfactual “but for” performance and should document assumptions transparently.

Ethical issues arise when organisations present optimistic recovery times, conceal dependency concentrations, or use models that systematically understate disruption to obtain lower premiums. Governance should require traceable data, independent challenge, privacy protection and clear communication of uncertainty. Suppliers’ continuity information must be handled lawfully and proportionately, particularly where it contains commercially sensitive or personal data.

8. Technology, cyber-physical risk and emerging developments

Digitalisation increases both resilience and dependency. Cloud services, automation, remote monitoring and digital twins can improve visibility and enable rapid rerouting. They can also create concentration in common platforms, identity providers, software libraries, data centres and telecommunications networks.

Artificial intelligence may assist with dependency discovery, anomaly detection, demand forecasting and claims document review. Its outputs require human validation because historical data may omit rare events, supplier relationships may be incorrectly inferred, and generated recommendations may appear more certain than the evidence supports. AI systems themselves require continuity controls, including model access, data integrity, fallback procedures and protection against malicious manipulation.

Contemporary resilience programmes increasingly address climate transition, extreme weather, geopolitical fragmentation, critical infrastructure interdependence, semiconductor dependence and third-party technology risk. Regulatory expectations in many jurisdictions are moving toward identification of important business services, impact tolerances, scenario testing and evidence of remediation. Exact obligations vary by sector and country; insurance professionals must therefore coordinate with legal and compliance specialists rather than treating a single framework as universally applicable.

9. Illustrative case: the single-source precision component

Background

The following fictional case illustrates an industrial electronics manufacturer, Apex Controls. It sells control modules to global equipment manufacturers. Its final assembly plant has fire protection, backup power and a documented continuity plan. However, one precision connector is purchased from a single specialist supplier, Delta Components, located in a region exposed to flood and earthquake.

Problem

Apex’s procurement team classifies the connector as a routine purchased part because its unit price is low. The supplier’s quoted replacement lead time is twelve weeks, but full requalification of an alternative source would take six months. Apex holds four weeks of finished-goods inventory and two weeks of connectors. The supplier has no tested evidence that its tooling can be transferred.

Analysis

The connector is a bottleneck. The relevant exposure is not its purchase cost but the contribution lost if final assembly stops. Apex’s process map reveals that two apparently independent suppliers use the same regional plating subcontractor. A supplier questionnaire had not captured this tier-two dependency.

A scenario workshop estimates:

• four weeks of inventory consumption before shortage;
• eight weeks to repair or replace supplier tooling after a severe event;
• ten weeks for qualification and ramp-up of an alternative source;
• partial production possible only after redesign approval.

The MIP selected by Apex’s property policy is twelve months, but the CBI sublimit covers only three months of projected contribution. The engineering analysis therefore identifies a mismatch between policy structure and plausible recovery time.

Approach and solution

Apex adopts four measures:

1. qualify a second supplier in a different region;
2. hold strategic connector inventory based on lead-time and shelf-life analysis;
3. negotiate supplier access to duplicate tooling and recovery evidence;
4. revise the CBI limit and document the dependency for underwriting and claims purposes.

It also tests a controlled redesign that permits two connector specifications, subject to customer approval. The continuity plan is changed from “contact supplier” to a sequenced playbook covering inventory allocation, customer prioritisation, engineering approval, alternative freight and regulator communication.

Outcome

The measures increase annual operating cost, but they reduce the maximum credible interruption and improve confidence in the recovery curve. Insurance does not become the sole risk response; rather, it finances residual loss while engineering and procurement reduce severity. The case demonstrates why bottleneck analysis, tiered supplier mapping and policy-limit review must be integrated.

Learning points

1. Low component value does not imply low interruption significance.
2. Supplier diversification is ineffective when suppliers share a common sub-supplier.
3. Qualification and regulatory approval may dominate physical repair time.
4. CBI limits should be based on contribution and recovery duration, not purchase spend.
5. A continuity plan is credible only when tested with owners, resources and decision thresholds.

Challenges and limitations

No BI model can predict the future precisely. Demand may disappear, increase unexpectedly or shift to competitors. Historical margins may not represent future product mix. Recovery estimates may be biased by optimism, while supplier data may be incomplete or commercially restricted. Correlated events can invalidate assumptions of independence. Insurance wording may respond differently from management accounting. Finally, resilience investments can produce benefits that are difficult to quantify, such as trust, safety and strategic flexibility.

These limitations support disciplined uncertainty management rather than abandonment of analysis. Use ranges, scenario bands, sensitivity tests and documented expert judgement. Separate facts, assumptions and policy interpretations. Revalidate the analysis after acquisitions, site moves, technology changes, major supplier changes, new products and significant claims.

Best-practice implementation sequence

A practical organisation can proceed as follows:

1. Identify important products and services and their acceptable disruption limits.
2. Map end-to-end processes, sites, utilities, technology, people and third parties.
3. Locate bottlenecks, single points of failure and common-cause concentrations.
4. Quantify contribution, recovery curves, mitigation costs and CBI scenarios.
5. Compare MTPD, RTO, RPO and MIP; resolve inconsistencies.
6. Select prevention, redundancy, alternative capacity, inventory and transfer measures.
7. Align policy wording, limits, deductibles, waiting periods and evidence requirements.
8. Exercise severe but plausible scenarios, including supplier and cyber-physical events.
9. Measure results, record lessons and assign remediation owners.
10. Report residual risk and uncertainty to senior management and the board.

Chapter Summary

Business interruption is a time-element exposure arising from the disruption of processes that create revenue and contribution. Effective analysis begins with end-to-end mapping of critical activities and their physical, utility, technological, human, material, commercial, regulatory and financial dependencies. Concentration and common-cause failure are often more important than the number of nominal suppliers or sites.

The financial analysis should use a defensible accounting basis, distinguish variable from continuing costs, model gradual recovery and include qualifying increased costs of working. The maximum indemnity period must reflect the complete restoration pathway, including procurement, approvals, commissioning, customer requalification and market recovery. Business continuity, disaster recovery, alternative capacity, inventory and supplier diversification reduce operational severity; insurance transfers only the residual financial risk and depends on precise policy wording.

CBI requires analysis of upstream and downstream dependencies, including hidden tier-two and shared infrastructure risks. Scenario analysis, sensitivity testing and claims-ready records improve decision quality. Governance should challenge optimistic assumptions, protect sensitive data and ensure that resilience claims are supported by exercises and evidence. Technology and AI can improve mapping and response, but they introduce new concentrations and must be governed accordingly.

Key Terms

Business interruption: Financial loss caused by interruption or interference with normal business activity.

Contingent business interruption: Time-element loss caused by disruption at a dependent supplier, customer, utility or other property.

Operational resilience: Capability to continue important products or services within acceptable limits during disruption.

Business continuity management: Governance and practices for maintaining and recovering important activities.

Disaster recovery: Restoration of technology, data, facilities or infrastructure after disruption.

Maximum indemnity period: Longest policy period for which covered interruption loss may be indemnified.

Maximum tolerable period of disruption: Longest period an activity can be unavailable before unacceptable consequences arise.

Recovery time objective: Target time for restoring a process, system or service.

Recovery point objective: Maximum tolerable period of data loss measured in time.

Gross profit: Relevant sales or turnover less insured variable costs, subject to the applicable accounting and policy basis.

Contribution margin: Contribution expressed as a proportion of sales.

Increased cost of working: Additional expenditure incurred to reduce or avoid interruption loss.

Bottleneck: Resource or process whose limited capacity constrains overall output.

Single point of failure: Component whose failure can interrupt a critical service without an effective substitute.

Common-cause failure: Failure of apparently separate components due to one shared cause or dependency.

Concentration risk: Excessive exposure to one location, supplier, utility, technology platform or other correlated source.

Scenario analysis: Structured examination of consequences under a defined disruption event.

Critical process: Process whose interruption threatens important products, services or financial objectives.

Supply-chain resilience: Capacity of a supply network to anticipate, absorb, recover from and adapt to disruption.

Claims readiness: Availability of reliable records, responsibilities and evidence needed to quantify and support a claim.

Review Questions

Short Answer Questions

1. Distinguish business continuity from disaster recovery.
2. What is the difference between MTPD, RTO and RPO?
3. Why can a low-value component create a high business interruption exposure?
4. State two examples of common-cause failure in a supply chain.
5. What is the purpose of a maximum indemnity period?

Long Answer Questions

1. Explain how an organisation should map critical processes and dependencies for liability and property risk engineering.
2. Discuss the assumptions and limitations of using contribution margin to estimate business interruption loss.
3. Compare prevention, redundancy, alternative capacity, inventory and insurance as resilience strategies.
4. Explain how contingent business interruption exposure should be assessed across tier-one and deeper-tier suppliers.
5. Evaluate the governance and claims-readiness practices required for a credible operational resilience programme.

Analytical / Application Questions

1. A business earns monthly contribution of £900,000. It has no output for two months, operates at 40% capacity in month 3 and 75% in month 4. Estimate lost contribution, assuming contribution is proportional to capacity. State the limitations of your estimate.
2. A company has three suppliers, but all depend on one regional port. Analyse whether this represents genuine diversification and recommend additional controls.
3. A cloud outage restores applications within the stated RTO, but identity services and customer telecommunications remain unavailable. Analyse why the recovery plan failed and propose a revised dependency and testing approach.

Multiple Choice Questions with Answers

Question 1

Which measure identifies the longest period a process can be unavailable before unacceptable consequences arise?

A. Recovery point objective

B. Maximum tolerable period of disruption

C. Contribution margin

D. Waiting period

Correct Answer: B. Maximum tolerable period of disruption

Question 2

A firm has sales of £5 million and variable costs of £3 million. What is its contribution margin ratio?

A. 20%

B. 40%

C. 60%

D. 167%

Correct Answer: B. 40%

Question 3

Which situation is the clearest example of contingent business interruption?

A. Fire damages the insured’s own warehouse

B. The insured pays for routine maintenance

C. A key supplier’s covered loss stops the insured’s production

D. The insured increases its advertising budget

Correct Answer: C. A key supplier’s covered loss stops the insured’s production

Question 4

What does an RPO primarily measure?

A. Target time to rebuild a facility

B. Maximum tolerable data loss measured in time

C. Maximum insurance limit

D. Supplier replacement cost

Correct Answer: B. Maximum tolerable data loss measured in time

Question 5

Why may several geographically separate suppliers still represent concentration risk?

A. They may share a common sub-supplier or infrastructure

B. They always have identical prices

C. Geographic separation eliminates all risk

D. Their contracts must have the same expiry date

Correct Answer: A. They may share a common sub-supplier or infrastructure

Question 6

A business has monthly contribution of £1 million, zero capacity in month 1, 50% capacity in month 2 and 80% capacity in month 3. Ignoring mitigation, what is lost contribution?

A. £1.50 million

B. £1.70 million

C. £2.30 million

D. £3.00 million

Correct Answer: B. £1.70 million

Question 7

Which statement best describes increased cost of working?

A. Any expenditure made during a claim

B. Additional expenditure that reduces or avoids interruption loss, subject to policy terms

C. All fixed operating costs

D. The value of damaged buildings

Correct Answer: B. Additional expenditure that reduces or avoids interruption loss, subject to policy terms

Question 8

Why should the maximum indemnity period include customer requalification?

A. Physical repair always takes longer than qualification

B. Production may not return to normal immediately after physical repair

C. Qualification is unrelated to business interruption

D. It determines the property deductible

Correct Answer: B. Production may not return to normal immediately after physical repair

Question 9

Which is the strongest evidence that a disaster recovery plan is credible?

A. It is stored in a policy manual

B. It has been tested against realistic scenarios and deficiencies corrected

C. It uses technical terminology

D. It assumes all suppliers recover simultaneously

Correct Answer: B. It has been tested against realistic scenarios and deficiencies corrected

Question 10

What is a principal limitation of an expected-loss calculation such as E[L] = ∑ⱼ pⱼ × Lⱼ?

A. It cannot include probabilities

B. It may understate the strategic importance of a low-probability extreme loss

C. It always double counts correlated events

D. It measures only physical damage

Correct Answer: B. It may understate the strategic importance of a low-probability extreme loss