Insurance only works when every policy forms part of a deliberate risk strategy.
Most businesses treat strategy as a plan.
Strategy is not a plan. A plan describes what you will do. Strategy determines what is worth doing and why. It is the disciplined process of recognising patterns, anticipating uncertainty, challenging bias and assumptions and making informed decisions before others see the need. Strategy is not an exact science. It is sound judgment applied to uncertainty. Taking this a step further, a risk strategy is the disciplined process of making better decisions before financial uncertainty becomes reality.
In risk and insurance, this distinction is absolutely key.
Most insurance programmes are designed from the bottom up. Ask for asset sums insured, request quotes, buy the cheapest cover available. This is not even planning, it is at best, a basic tick the box exercise and is the furthest thing from a risk strategy.