Sign in

Blog · Territory, capacity and quota planning · Finance and FP&A teams

Scenario analysis in risk management

Use business disruption scenarios to measure revenue and cost exposure from existing finance files. Build a reconciled example, test a recovery action and assign a decision trigger with an accountable owner.

The short answerScenario analysis in risk management estimates how a defined disruption would affect a company's revenue, costs and ability to operate. Start with reconciled business data, specify the affected activity and duration, calculate the financial exposure, then compare recovery actions. Assign an owner and a measurable trigger so the analysis leads to a decision rather than an unused downside forecast.

Scenario analysis in risk management turns a defined business disruption into a financial exposure and an action trigger. Start with the sales and costs that are actually exposed, state what changes and for how long, then calculate the outcome before and after a response. The useful output is a decision the business can make while it still has options.

Define the event before choosing percentages

Write a short causal statement: a named supplier cannot deliver a component during the coming month, which prevents some shipments of the product that uses it. Identify the location, product group, affected period and recovery constraint. Avoid a vague label such as adverse conditions, because it does not tell an operating owner which rows to validate.

Ready.gov describes risk assessment as identifying hazards and analyzing what could happen. Its guidance also emphasizes vulnerabilities that can increase the damage. For a business scenario, a sole-source component or missing substitute may matter more than a broad change in the economic outlook.

Separate the event from its consequences. An outage can cause canceled orders, delayed shipments, extra freight and replacement purchases. A delayed sale belongs in a different period; a canceled sale is lost revenue. Record that distinction before adding the effects together.

Build the exposure from existing exports

Use a sales register by product and customer, a purchasing or supplier-spend export, and the relevant cost ledger. Keep the same accounting period, currency and product identifiers. Reconcile sales to revenue and costs to the ledger before applying disruption assumptions.

The files establish the exposure; operating owners establish the assumptions. Historical shipments show what depends on the supplier, but do not prove the duration of the next outage. Procurement should validate replacement lead times and quotes. Sales should distinguish genuinely lost demand from a shipment the customer will accept later.

Use customer concentration to identify concentrated demand and contracted share against actual spend to examine purchasing coverage. Those measures inform the case without replacing the disruption analysis.

Work a supplier outage through the monthly P&L

Consider a US distributor. Its reconciled monthly baseline contains the following rows. Variable costs are costs that actually stop when the affected shipments stop; shared fixed costs continue during the month.

Baseline row Revenue (USD) Variable cost (USD) Fixed cost (USD)
Product A 600,000 360,000 0
Product B 400,000 240,000 0
Shared fixed costs 0 0 300,000
Total 1,000,000 600,000 300,000

Product A's contribution is $600,000 minus $360,000, or $240,000. Baseline operating profit is $1,000,000 minus $600,000 minus $300,000, or $100,000. Product B is unaffected by the supplier in this example.

The disruption case assumes that 25% of Product A revenue is lost during the month, with the same share of its variable costs avoided. A more severe case loses 50%. Added response costs are explicit assumptions, separate from ordinary variable costs.

Scenario operating profit = Baseline revenue − Lost revenue − Baseline variable cost + Avoided variable cost − Fixed cost − Added response cost.

Put the following table in A1:I4. B and C are entered assumptions; the remaining columns are calculated. Amounts are whole dollars, and percentages are exact for this example.

Case A revenue lost Response cost (USD) Lost revenue (USD) Avoided cost (USD) Revenue (USD) Variable cost (USD) Fixed cost (USD) Operating profit (USD)
Base 0% 0 0 0 1,000,000 600,000 300,000 100,000
Disruption 25% 20,000 150,000 90,000 850,000 510,000 300,000 20,000
Severe disruption 50% 40,000 300,000 180,000 700,000 420,000 300,000 -60,000

Use these formulas in row 2, then fill down:

D2 = 600000*B2
E2 = 360000*B2
F2 = 1000000-D2
G2 = 600000-E2
H2 = 300000
I2 = F2-G2-H2-C2

The disruption loses $150,000 of revenue but avoids $90,000 of variable cost. Its profit reduction is therefore $150,000 minus $90,000 plus $20,000 of response cost, or $80,000. The independent check is baseline profit of $100,000 less $80,000 equals the scenario's $20,000 profit.

For setting up the case inputs in a workbook, use the existing scenario analysis spreadsheet guide. Keep this risk assessment focused on exposure, feasible actions and the point at which someone must act.

Test the response, including its cost

Procurement proposes a substitute supplier that restores half the lost revenue in the disruption case. That restores $75,000 of revenue and $45,000 of ordinary variable cost, following Product A's baseline cost ratio. The substitute adds a $10,000 premium. The original $20,000 response cost remains.

Disruption outcome Revenue (USD) Variable cost (USD) Fixed cost (USD) Original response cost (USD) Supplier premium (USD) Profit (USD)
Without substitute 850,000 510,000 300,000 20,000 0 20,000
With substitute 925,000 555,000 300,000 20,000 10,000 40,000

The improvement is $75,000 minus $45,000 minus $10,000, or $20,000. It also equals the difference between the two profit rows. This is the amount available to justify the action financially under these assumptions; it does not prove that substitute stock is available.

Ready.gov's business impact guidance recommends comparing disruption costs with recovery strategies. It also highlights timing and duration. If replacement shipments arrive after the affected month, move the restored revenue and associated costs to their realistic periods.

Give the result an owner and a trigger

Suppose management sets an illustrative monthly profit trigger of $25,000. The unmitigated disruption produces $20,000, so it triggers a procurement review; the substitute case produces $40,000. Procurement owns availability, sales validates customer acceptance, and finance confirms the reconciled profit effect before the authorized manager approves spending.

Record the evidence date, assumption owner, action deadline and next review in the workbook. A risk management dashboard can organize the recurring review once those definitions are agreed. Do not confuse a threshold chosen by management with an externally required limit.

Where scenario analysis goes wrong

  • Treating all costs as avoidable. Salaries, leases and committed purchases may continue even when shipments stop. Validate behavior with the cost owner.
  • Counting revenue loss twice. A customer cancellation and the associated product outage may describe the same lost sale. Use affected order rows to remove overlaps.
  • Calling delay a permanent loss. Show the recovery period and cash timing when sales shift between months.
  • Assuming mitigation is available. Include lead time, capacity, premiums and approval requirements, with evidence from the responsible team.
  • Attaching unsupported probabilities. Keep conditional exposure separate from expected loss unless the probability assessment is defensible.

Examine your business exposure in Covirage

Bring your sales and cost exports with a workbook of disruption assumptions and response cases. Covirage maps the columns; its tools compute and check the historical exposure and supplied scenario figures, while the external AI model explains the results with every figure traced to its rows. Create a free Covirage account and bring a sample of your own files.

See FP&A reporting for the supporting finance workflow.

Questions people ask

What is an example of scenario analysis in risk management?

A distributor can estimate the effect of a supplier outage on affected product sales, subtract the variable costs it would avoid, and add expediting or replacement costs. The result shows the exposure before and after a recovery action, with the assumptions visible for review.

Does a scenario need an assigned probability?

No. A scenario can support a contingency decision without claiming how likely it is. If probabilities are used, document the evidence, the time horizon and whether the cases overlap. A loss calculated under one set of assumptions is not automatically an expected loss.

Who should own business risk scenarios?

The operating owner should validate the disruption and feasible response. Finance should reconcile the baseline and calculate the financial effect. The person authorized to commit resources should approve the trigger and action, including what evidence would justify revising the assumptions.

How often should risk scenarios be updated?

Refresh them when the underlying exposure or recovery options change, and at the review cadence agreed by the business. Supplier changes, new contracts, customer losses and shifts in inventory availability can invalidate a case even when the spreadsheet formulas still work.