Underinsured and Underprepared: The Quiet Risk Inside Your Business

There's a particular kind of confidence that comes from having a policy document in a drawer. It feels like responsibility. It feels like adulting. It is, for an uncomfortable number of UK founders, a false sense of security dressed up in a folder from an insurer you've half-forgotten you're paying.

Underinsurance among small businesses is not a fringe problem. It's structural. Policies get bought once, renewed on autopilot, and quietly fall behind the actual shape of the business they're supposed to protect. The company grows, pivots, takes on staff, buys equipment, moves premises, starts selling online, and the policy just... sits there, unchanged, increasingly fictional as a description of the risk.

This is not about selling you anything. It's about five specific risks that founders routinely underestimate, and what to actually do about them before something forces the conversation.

1. Your business interruption cover probably reflects your 2019 revenue

Business interruption insurance pays out when something stops you trading: a fire, a flood, a supplier collapse. The payout is calculated against your declared turnover. If your business has grown since you last updated your policy, and for many founders who came through the pandemic years with leaner, sharper operations, it has, your declared figure is almost certainly too low.

Check the indemnity period too. Most policies default to twelve months. But a serious incident at a manufacturing unit, a specialist premises or a business with long client contracts could take considerably longer than a year to recover from. Ask yourself honestly: could you be back to full trading in twelve months? If the answer is 'probably not', the policy needs adjusting.

2. You've built a digital business on an analogue-era policy

Cyber risk is the underinsurance story of this decade. A basic package arranged before your business had an e-commerce platform, a client database or a team working remotely across personal devices is almost certainly not built for what you're actually doing now.

Cyber cover, where it exists in standard policies, tends to be a bolt-on with modest limits. What it often fails to cover adequately: the cost of notifying customers after a data breach (legally required under UK GDPR), regulatory fines, reputational management and the income lost during downtime. If your business holds customer data, and almost every business does, this deserves a standalone conversation, not an assumed checkbox.

'The question isn't whether a cyber incident will cost you money. It's whether your policy will actually cover the bill when it does.'

3. Your equipment and stock are insured at what you paid, not what they cost to replace

Inflation has been doing quiet damage to contents cover for several years. If your policy lists equipment or stock at values set two or three years ago, those figures are likely to be significantly below current replacement cost. This is called underinsurance, and most policies contain something called the 'average clause', which means if you're insured for sixty percent of the real value, the insurer will only pay sixty percent of any claim, even a partial one.

This week's action: pull out your policy schedule and compare the declared values against what it would actually cost, at today's prices, to replace your equipment and stock from scratch. If there's a gap, call your insurer or broker and get it corrected before renewal, not after a claim.

4. Your personal liability as a founder is almost certainly broader than you think

Directors and officers liability (D&O) is routinely overlooked by founders who assume it's for FTSE-listed boards and large corporates. It isn't. Any company director can be personally pursued, by creditors, employees, shareholders or regulators, for decisions made in their professional capacity. Personal assets included.

If you are a director of a limited company, your liability does not begin and end with the business. A wrongful trading allegation, an employment dispute, a regulatory investigation: these can reach you personally in ways that standard public liability or professional indemnity cover will not touch.

5. You haven't thought about key person cover, and the bank probably has

If you are the business, the one with the relationships, the technical knowledge, the client trust, what happens to the company's revenue and its ability to service debt if you can't work? Lenders who've extended credit against future cashflow have already thought about this. Founders rarely have.

Key person insurance pays a lump sum to the business if a critical individual dies or is diagnosed with a serious illness. It's distinct from personal life cover. It exists to keep the business solvent long enough to adapt, restructure or sell. If you'd have to call your biggest clients personally and tell them not to worry, you are a key person.

Before your next renewal: the four questions that matter

You don't need a broker on speed-dial to start this process. Before you renew anything, ask four things. Has the nature of my business changed materially since this policy was written? Are all declared values still accurate at current replacement cost? Does this policy reflect how I actually work now, including remote working and digital operations? And: what would a serious incident actually cost me, and does this policy cover that number?

The worst time to find a gap in your cover is during a claim. The best time is a quiet Tuesday morning with a cup of tea and last year's policy schedule. This week will do.