A Practical Guide to Managing Risk, ROI, and Growth

/in

Running a business in 2026 is not for the faint of heart.

Fuel, shipping, and distribution costs remain stubbornly elevated. Labor markets are tighter than they look on paper, wages are up, but so is turnover, and the true cost of replacing a key employee is far higher than most owners realize. Health benefits continue to climb at rates that outpace inflation. Employees now expect meaningful retirement savings options, not just a token 401(k). And the threat landscape for commercial risk, from cyber attacks to catastrophic weather events, has expanded faster than most insurance programs have kept up.

At the same time, owners are being asked to do more with less margin for error. Protect the company. Take care of your people. Stay competitive. Grow.

At Apex Risk, we work alongside business owners every day. And as a business ourselves, we feel the same pressures you do. What we’ve learned, from our own experience and from working across industries, is that the owners who gain ground in a tough environment aren’t the ones who cut the most. They’re the ones who see the whole picture.

This guide is designed to help you do exactly that.

Start at 10,000 Feet, Not in the Weeds

Most cost reviews happen in silos. Insurance gets looked at once a year at renewal. Benefits get revisited during open enrollment. Retirement plans get left on autopilot. Staffing decisions happen reactively.

The problem is that these decisions are deeply interconnected.

Poor benefits design drives turnover. Turnover drives recruiting and onboarding costs. Weak risk management drives up insurance premiums. Fiduciary gaps in your retirement plan create compliance exposure you may not even know you’re carrying.

Before you dig into any one category, ask yourself four questions:

  • Where are our largest cost centers right now?
  • Which of those are growing the fastest?
  • Where do our costs connect directly to risk?
  • Where do our costs connect to employee experience and retention?

You’re not just managing line items. You’re managing a system. Here’s how to evaluate each part of it.

Hiring and Retention: Your Most Expensive Line Item Is Probably Turnover

Labor is still the biggest cost driver for most businesses in the $5M–$25M range. But the real number isn’t the salary on the offer letter, it’s what it costs you when someone leaves.

Recruiting fees, onboarding time, lost productivity during the transition, manager bandwidth, and cultural disruption all compound quickly. Depending on the role and the industry, replacing a single employee can run anywhere from 30% to 150% of their annual salary. For a $75,000 employee, that’s a real cost of $22,000 to over $112,000, per departure.

What to evaluate:

  • Are you hiring reactively when seats are empty, or strategically based on where the business is going?
  • Do you know why people are leaving? Not the exit-interview answer, the real answer?
  • Is your compensation and benefits package competitive in your actual hiring market?
  • Are your managers equipped to retain talent, not just supervise it?

Where the opportunity is:

Retention is a cost-containment strategy. It just doesn’t show up that way in the budget. Investing in the right mix of compensation, benefits, and culture almost always costs less than constant replacement, and it protects institutional knowledge that can’t be replaced at any price.

Health Benefits: The Hidden Lever Most Owners Aren’t Pulling

Health benefits are among the fastest-growing expenses for employers, and most businesses are managing them the same way they did a decade ago: accept the renewal, absorb the increase, repeat.

Annual increases of 8% to 15% are now considered “normal.” They’re not sustainable.

What to evaluate:

  • Are you fully insured, level funded, or self-funded, and do you know why you’re in that structure?
  • Are your employees actually using the benefits you’re paying for, or are you funding coverage that doesn’t match their needs?
  • Do you have different employee groups (full-time, part-time, younger, older) who would benefit from different plan designs?
  • How much of your spend is going toward unused or underutilized coverage?

Where the opportunity is:

Better plan design. Segmented offerings, smarter network selection, and alternative funding strategies, like level-funded or partially self-insured plans, can reduce costs meaningfully while actually improving the perceived value for your employees. This is one of the clearest areas where cost savings and talent retention can move in the same direction at the same time.

Retirement Plans: The Area Most Owners Underestimate

Retirement plans are no longer a checkbox benefit. Employees, especially high performers, expect genuine opportunities to save, and they’re sophisticated enough to evaluate what you’re offering.

On the regulatory side, the stakes have never been higher for plan sponsors. Many business owners are carrying significant fiduciary liability without fully understanding it.

What to evaluate:

  • Are your plan fees competitive? Fee benchmarking is not optional, it’s a fiduciary requirement.
  • Is your plan design actually aligned with your workforce demographics and your goals as an owner?
  • Do you understand your responsibilities under ERISA as a plan sponsor?
  • Are you exposed as a 3(16) fiduciary, meaning you’re personally liable for administrative decisions, without realizing it?

Where the opportunity is:

The right retirement plan structure improves employee participation, creates tax efficiency for owners, and reduces administrative burden when the right partners and fiduciary framework are in place. Ignoring this area creates both financial drag and compliance risk. A proper 3(16) fiduciary arrangement can shift administrative liability off your plate entirely, most business owners don’t know that option exists.

Commercial Insurance: Stop Treating Renewals as a Checkbox

Insurance is often managed as a necessary cost rather than a strategic tool. That’s where most businesses leave both money and protection on the table.

Premiums are rising across property, liability, and specialty lines. Meanwhile, most businesses have changed significantly, new services, new locations, new revenue streams, new exposures, and their insurance programs haven’t kept pace.

What to evaluate:

  • When was your coverage last reviewed in depth, not just renewed?
  • Are your limits still aligned with your current exposure, including property values, revenue, and contractual obligations?
  • Have you added services, employees, or locations that aren’t properly reflected in your current program?
  • Are there redundancies in your coverage that you’re paying for twice?

Where the opportunity is:

A true coverage review, not a renewal conversation, can uncover both gaps and redundancies. Done right, it aligns your insurance program with how your business actually operates in 2026, not 2019. That protects you better and often costs you less.

Cyber Risk: This One Requires a Harder Conversation

Let’s be direct: if you’re in the $5M–$25M revenue range and you think cyber risk doesn’t apply to you, the evidence says otherwise.

Small and mid-sized businesses are more frequently targeted by cybercriminals than large enterprises, not less. They tend to have weaker controls, less dedicated IT infrastructure, and fewer incident response resources. That combination makes them attractive targets.

And the impact of a single event is not just financial. It’s operational, reputational, and in some cases, existential.

The Instructure/Canvas breach is a real-time example of what this looks like at scale.

As of this week, May 2026, the criminal hacking group ShinyHunters breached Instructure, the company behind Canvas, one of the most widely used learning management platforms in higher education. The group claimed to have stolen data from nearly 9,000 schools worldwide, including names, email addresses, student ID numbers, and messages between users. Universities including Columbia, Rutgers, Princeton, Harvard, and Georgetown were among those issuing alerts to students and faculty. Students were locked out of course materials, assignments, and grades during final exam period, and professors had to scramble to send materials through other channels.

This was the second time ShinyHunters breached Instructure in the same month. The company had reportedly addressed the first incident with security patches, only to be breached again days later.

Instructure is not a small business. They have dedicated security teams, enterprise infrastructure, and significant resources. The breach happened anyway.

Now ask yourself: if your business were breached tomorrow, your client data, employee records, financial systems, vendor communications, what would happen? How long could you operate? What would it cost to respond, notify affected parties, and restore systems? What would it do to your reputation?

What to evaluate:

  • Do you have dedicated cyber liability coverage, and do you know what it actually covers versus what it excludes?
  • Are your internal controls aligned with your underwriter’s requirements? (Many claims are denied because they aren’t.)
  • Do you store any sensitive data, client PII, employee records, payment information, health data? If the answer is yes, you have cyber exposure.
  • Have you tested your incident response plan, or do you have one at all?

Where the opportunity is:

The right combination of cyber coverage and internal controls reduces both your premium and your likelihood of a claim. These two things reinforce each other. Insurers are paying closer attention to your security posture than ever, businesses with stronger controls get better pricing and broader coverage. This is not an area to defer.

A Practical Business Review Checklist

Here’s a working framework you can use right now to evaluate where you stand. Run through this once a year at minimum, and honestly, once a quarter in this environment.

People

  • What is our actual turnover rate, and what is it costing us?
  • Are compensation and benefits aligned with what our market demands?
  • Do we know why we’re losing the people we’re losing?

Benefits

  • What is our total health benefits spend, and how has it changed over three years?
  • Are we in the right funding structure for our size and workforce?
  • What is our claims utilization telling us about plan design?

Retirement

  • When did we last benchmark our plan fees?
  • Do we understand our fiduciary exposure as a plan sponsor?
  • Is a 3(16) fiduciary arrangement right for us?

Commercial Insurance

  • When did we last do a true coverage review (not just a renewal)?
  • Do our limits reflect our current operations, contracts, and property values?
  • What claims trends are we seeing, and what do they signal?

Cyber

  • Do we have dedicated cyber coverage?
  • What data do we house, and are we treating it accordingly?
  • Are our internal security controls current and documented?

Operations and Overhead

  • Are vendor contracts being reviewed proactively or just renewed automatically?
  • Where are technology and process gaps costing us time and money?

The Goal Isn’t to Spend Less. It’s to Spend Smarter.

Cutting costs without understanding their impact creates new problems. Reduce benefits without understanding what employees value, and you lose the people you most need to keep. Drop coverage to save on premiums and you may be one claim away from a serious financial event. Ignore your retirement plan’s fiduciary structure and you’re carrying liability that has nothing to do with your core business.

The businesses that will outperform in this environment, in San Diego and nationally, are the ones taking a holistic view. They treat insurance as a strategic tool. They align benefits with what employees actually need. They take retirement plan governance seriously. And they don’t wait for a breach, a lawsuit, or a renewal conversation to start asking the right questions.

As commercial insurance brokers, we sit inside a larger ecosystem of business services professionals, benefits consultants, retirement plan advisors, HR specialists, CFOs, CPAs. We hear the same challenges across every industry, every week.

If you want to take a fresh look at how all of these pieces fit together for your business, that conversation starts with the full picture.

Peter Katkov is the founder of Apex Risk and Insurance Services, a commercial insurance brokerage based in San Diego, California. Apex Risk works with small to mid-market businesses across industries to evaluate risk, design strategic insurance programs, and connect owners with the broader advisory resources they need to operate with confidence.

To schedule a business risk review, contact Apex Risk