The risk is already
on the balance sheet.
The question is whether it was decided or inherited.
No operation ever has its full risk mapped. There is what the company knows, what it knows it does not know, and what only reveals itself afterwards. The list of hazards never closes. But everything that happens to the operation passes through the same place: the balance sheet. That is why Retention Engineering does not start from the list, which is endless, but from the capacity to absorb loss, which is finite and measurable.
Retention Engineering is the discipline built for this intersection. It measures, models and governs the share of risk a company effectively retains, integrating the three lenses into a single capital-decision agenda.
How much of the retained risk currently on your balance sheet was actually decided?
Knowledge of risk comes in degrees. Part of the inventory is mapped and quantified. Part is mapped, but not measured. Part is plausible, recognisable, yet off the list. And part is anticipated by no one.
A longer inventory is useful and remains legitimate work. It simply does not settle the question. Transfer, by its contractual nature, privileges what can be described, delimited, contracted and priced. What remains, at any degree, is absorbed in the same place: cash, earnings and capital.
How much insurance does your balance sheet actually need? Against which losses, in what amount, and over what cash horizon?
It is the question almost every CFO holds privately. It sits before the policy, before the renewal, before premium and deductible. Yet it rarely reaches the placement table intact, because the answer may be perceived as conflicted. It is not anti-insurance: sometimes the answer is transfer more, sometimes less, and often it is to change the limit, the deductible, the layer or the indemnity period. The insurance decision is rarely structured as a capital decision. That is precisely the space Retention Engineering occupies, reading the decision before it becomes a policy negotiation.
In an initial conversation, Retention Engineering does not start with a model. It starts with a simple reading: which loss could truly affect cash, capital and continuity; how much of that loss would be effectively recoverable; and how much would remain on the balance sheet.
An initial conversation can run on public information alone. The objective is not to issue a diagnosis, but to test whether there is a relevant retained exposure to be governed.
Test the initial readingThe company already understands risk. It just reads it in three languages that do not speak to one another.
Risk transfer sees what leaves the balance sheet. Finance sees what the balance sheet can absorb. Engineering sees what can happen. Each lens is competent in its own field. What changes everything is when the three meet.
What leaves the balance sheet.
Policy, limit, contracted retention. Looks at cover and at premium. A competent reading of what has been ceded to the market.
What the balance sheet can absorb.
Capital, liquidity, covenants. The CFO reads exposure to volatility and to the cost of shock. A competent reading of absorption capacity.
What can happen.
Scenarios, severity, failure mode, recovery time. Operations read the technical event and the cost of the loss.
When the three lenses meet, retention stops being a consequence of the policy and becomes a capital decision.
At the centre, the share of risk the company effectively carries: after engineering, after transfer, within the absorption capacity of the balance sheet.
ERE · Effective Retained Exposure. The share of loss that remains economically with the company after the effective recoveries of the transfer mechanisms, including what was never within their scope. It combines the unrecovered share, the non-transferable share and the economic cost of the interval until cash. Cover on paper is not cash on the day of the loss, and not every loss is transferable.
Three lenses call for three answers. The answers balance against each other.
The claim payment restores the asset in fourteen months. Who pays the payroll during that time?
Contracted cover is not the same as cash available on the day of the loss.
Between the loss event and the claim payment there is an interval. It can last months. It can last more than a year. During that interval the operation continues. Payroll still has to be paid. The contracts continue. The covenants continue.
The asset may eventually be reinstated. Liquidity during the interval has to be financed. That is why the retention decision has two axes, not one.
The boundary between the three answers is a capital decision.
Calibrating it is the work of Retention Engineering. Each vertex carries its own rationale. Every move on one vertex changes what remains for the other two.
Retain
Size calibrated against absorption capacity. Explicit band. Recorded criterion. Periodic review.
Transfer
Insurance programmes, captives, parametric covers, guarantees, contracts. Layer and deductible adjusted to what is worth ceding.
Mitigate
Reliability engineering, redundancy, maintenance, operating controls, segregation, protection, detection and response. Reduces probability, severity or recovery time.
Absorption is not a single number. It is a decision scale.
Prudential absorption capacity (RBC · Risk Bearing Capacity): how much loss the balance sheet absorbs, considering adjusted equity, liquidity, covenants and cash cycle. The scale locates the retained exposure against this capacity. Here, RBC means Risk Bearing Capacity, the prudential absorption capacity, not regulatory capital. The relation between the two measures is the RER (Retained Exposure Ratio): the ratio that reads the retained exposure as a multiple of this capacity and says whether the retention fits.
Can the balance sheet absorb the loss?
It is what the scale measures: the retained exposure against prudential absorption capacity.
Does the cash arrive in time?
Between the event and the claim payment, does the operation carry through the interval without breaching a covenant? This is the Claims Settlement Timing Gap.
Transfer can reduce what reaches the balance sheet. But it does not, on its own, remove the test of liquidity over time.
Two partners, one integrated reading.
Retention Engineering is led by two partners of Resilience Guardians, both chemical engineers, with more than six combined decades in risk management, corporate insurance and the transfer of complex risks in the international market. They work on the same foundations: the integrated view of risk, capital and transfer.
Waldemir Queiroz
More than thirty years working directly in risk management within industrial companies, combining operations, risk engineering, corporate insurance and finance leadership. Led recoveries of severe incidents and structured risk-transfer programmes.
Luciane Pereira Barbosa
More than thirty years in risk management and transfer. Worked both within companies and at insurance brokers, focused on placing high-complexity risks in the international market.
More than a sum of specialties, the two work on the same methodology. Retention is not read merely as an insurance deductible, merely as a technical event or merely as financial headroom, but as a single capital decision.
Start with the right question.
A 30-minute initial conversation is enough to test whether this reading makes sense for your operation. No advance preparation, no commitment, and no need to share confidential data.
The conversation draws only on public information and on a preliminary outside-in reading. The objective is not to issue a diagnosis. It is to test whether there is a relevant decision agenda.
In 30 minutes, the conversation tests three things: (1) whether there is a relevant retained exposure; (2) whether that exposure looks compatible with the prudential absorption capacity; (3) whether there is a concrete agenda to retain, transfer or mitigate better.
Or forward this page to someone in finance or operations. The conversation adjusts to the audience.