Shared Risk Outsourcing

Shared risk outsourcing moves defined business risks from buyer to supplier and prices them deliberately, rather than leaving them to fall wherever the contract happens to land. Risk transfer is the product being bought, and no supplier absorbs it for nothing.

Most contracts allocate risk by accident — a payment term, a volume assumption or a notice period quietly decides who pays when something goes wrong.

The disciplined version starts from a list. Each risk is named, assigned to whichever party can best manage it, and given a price if it moves.

That last step is the one buyers skip — a risk transferred without a price attached has not been transferred, it has simply been hidden inside a rate somebody will renegotiate later.

Key takeaways

• Risks should sit with the party best placed to manage them, not the weaker negotiator.
• Every transferred risk carries a price, whether or not the contract states one.
• Demand, cost, delivery and compliance risks behave very differently when moved.
• A risk register with owners belongs in the contract, not in a project document.

How it works

Contract type is the main instrument of risk transfer. Federal rules explain that contract types vary “according to the degree and timing of the responsibility assumed by the contractor for the costs of performance”, running from firm-fixed-price to cost-plus-fixed-fee.

That single sentence is the whole mechanism — move along the spectrum and you move risk, and the price moves with it in the opposite direction.

The allocation itself should be evidenced. UK government guidance asks that risk proposals be “subject to consideration and scrutiny to ensure they have been informed by genuine and meaningful market engagement”.

The table is deliberately blunt about who manages what. Transferring demand risk to a supplier who cannot see your forecast produces a higher price and no better outcome.

Pricing the transfer is the final step. A supplier accepting volume risk should be asked to show what it added to the rate, because that number is negotiable and a bundled rate is not.

Examples

Risk allocation is where a good commercial team earns its keep, because the same service can be bought with wildly different exposure. These four cases show sensible transfers and one that backfired.

A retailer keeps demand risk and buys on unit rates with a modest minimum. It pays a lower unit price because the supplier is not pricing a forecast it cannot see.

A bank transfers productivity risk through a fixed monthly fee for a defined service. Volumes rise 15% over two years and the fee does not move, which is exactly what it bought.

A manufacturer pushes currency risk onto an offshore supplier billing in its own local currency. The supplier adds a margin buffer, and the buyer pays more than a collar clause would have cost.

An insurer transfers regulatory change risk without a change-in-law clause. New reporting duties arrive, the supplier refuses to absorb them, and the parties spend a quarter arguing.

Related terms

Risk-sharing arrangements are described with several overlapping terms, and the differences sit in what exactly is being shared. The entries below mark the boundaries between them.

• Risk outsourcing: moving the management of a risk function, not the commercial exposure.
• Business risk: the category of exposure these contracts try to place.
• Gain sharing outsourcing: shares an upside, where this shares an exposure.
• Outcome based pricing: one mechanism for transferring delivery risk.
• Co-sourcing: shared delivery, which usually implies shared operational risk.
• Partnership outsourcing: the framing these arrangements are sold under.
• Contract lifecycle outsourcing: where risk clauses are actually administered over time.

FAQ

Which risks transfer well?

Those the supplier can see, measure and influence. Delivery, productivity and operational security transfer cleanly; demand and regulatory change usually do not.

Does transferring risk save money?

Rarely on day one. It buys certainty, and certainty is priced, so the question is whether the premium is smaller than the exposure it removes.

What does an untransferred risk cost?

Whatever it costs when it happens. The point of a register is to make that number visible before it lands rather than after.

How is this different from risk-reward pricing?

Risk-reward pricing is one formula for sharing cost variance. Shared risk outsourcing is the wider design question of which exposures move at all.

Should the supplier price each risk separately?

Wherever possible. A bundled rate hides what the transfer cost, which means it cannot be reconsidered when the risk profile changes.

Who should own the risk register?

Both parties, reviewed jointly. A register held by one side stops being a shared document within about two quarters.

See how risk is being allocated in current outsourcing contracts at Outsource Accelerator.