A manufacturer takes on a new contract that means running a line unattended overnight for the first time. A business adds a second shift to meet demand from a new customer. A factory brings in a piece of equipment it has never operated before.
None of these things happens on a renewal date. They happen whenever the business needs them to happen—and, in many businesses, the next serious conversation about risk happens whenever the renewal date says it should.
The assumption beneath this approach is that risk review is an annual event: something tied to a date on a calendar rather than to anything changing on the shop floor.
It is an understandable assumption. Renewal is when the paperwork receives attention, when the broker calls and when someone finally sits down to think about cover.
The problem is that risk does not wait politely for that date. It moves when the business moves. A manufacturer that only reviews risk at renewal may spend the rest of the year carrying a description of itself that is steadily drifting out of date.
Risk moves when the decision is made
The exposure changes when the business signs the contract, commissions the machine, changes the shift pattern, moves the process or becomes dependent on a new customer, supplier, person or system.
That does not mean every operational adjustment is material or that each one automatically requires an insurer notification. It means significant change should trigger a proportionate review while the decision can still be understood and shaped.
The review may reveal an operational action, a contract question, a training requirement, a continuity dependency, a need for specialist advice, an insurance issue—or nothing that requires further action. The purpose is to find out deliberately rather than discover the answer after a loss.
Waiting until renewal creates a blind period between the moment the exposure changes and the moment somebody formally looks at it.
Three conversations that should not be confused
Operational risk review, insurance review and renewal are related, but they are not the same activity.
An operational risk review asks what has changed, what could now stop or cost the business, what dependencies have been created and whether the controls still fit the work being done.
An insurance review asks whether the change affects the information previously provided, policy conditions, values, limits, assumptions or the need for a conversation with the broker, insurer or another specialist.
Renewal is the later point at which the overall risk presentation and protection are reconsidered for the next contract period.
Treating renewal as the only trigger compresses all three conversations into one annual exercise. By then the machine may be installed, the customer commitment signed, the shift operating and the dependency embedded.
Renewal should confirm that the risk position has been kept current. It should not be the first moment the business discovers what it has become.
What the Insurance Act does—and does not—say
Insurance cover is built around a presentation of risk: the picture of the business provided when a commercial insurance contract is agreed.
The Insurance Act 2015 sets out the duty of fair presentation before a non-consumer insurance contract is entered into. Part 2 of the Act also applies to variations of those contracts, with the risk considered in that context being the changes relevant to the proposed variation.
That does not create one universal rule requiring every operational change to be reported immediately. Whether a particular change needs to be raised, and when, depends on the contract, any applicable conditions and the circumstances. Commercial policies can contain specific notification or change provisions, and the detail matters.
The practical conclusion is narrower and more useful: a manufacturer should not assume the annual renewal date is the only—or necessarily the right—moment to ask whether a significant change affects its risk or insurance position.
Operational guidance follows the same logic
The Health and Safety Executive approaches the issue from a different direction. Its risk-assessment guidance says assessments should be reviewed regularly and kept current with working practices and equipment. It also says risk should be assessed before significant changes are made because new hazards can emerge when equipment, routes or the nature of work changes.
Insurance risk and workplace safety are different disciplines. The shared logic is that reassessment follows change. It is not postponed simply because a recurring review date has not arrived.
Composite example: the overnight line
About this example: The following is a composite scenario constructed from recurring manufacturing risk patterns. It is not presented as a named client engagement, legal conclusion or account of one identifiable claim.
A metal-processing business takes on a large contract in month four of its twelve-month policy. Meeting the volume requires a second production line to run unattended overnight for the first time in the company’s history.
Nobody raises the change with the broker. There is no renewal due, nothing needs signing and the decision feels operational rather than insurance-related. The line is running successfully, so the new arrangement quickly becomes normal.
In month nine, a fault on the line starts a fire during the unsupervised night shift.
The subsequent investigation has to reconstruct when unattended running began, what operational assessments and controls were introduced, how the risk had changed since the policy was arranged, and whether any policy provision required the change to be notified.
This does not mean the claim would automatically fail or that notification was necessarily required. Those questions depend on the facts and the contract. The point is that leadership is now investigating those questions after the loss, under pressure, rather than when the change was proposed.
Renewal eventually arrives in month twelve—three months after the event and eight months after the decision that mattered.
How good decisions create risk drift
Risk drift rarely begins with neglect. It often begins with good news.
A new contract increases output. A second shift improves capacity. A machine removes a bottleneck. A new supplier shortens lead times. A larger site gives the business room to grow.
Each decision may be commercially sound. The exposure changes because the decisions alter what the business depends on, what a failure would cost and what evidence leadership would later need to show that the change had been managed.
The information needed to see the whole picture is usually spread across the business. Sales understands the commitment. Operations understands the process. Engineering understands the machinery. HR understands the people and shift change. Finance understands the investment and cash exposure. The person managing insurance may see only part of it unless there is an agreed trigger for bringing those views together.
The control is therefore not “tell the broker everything”. It is a simple internal process for deciding which changes deserve review and who should be involved.
Changes that should prompt the question
A proportionate review should at least be considered when the business:
- signs a major contract or accepts unfamiliar delivery, warranty or liability commitments;
- buys, modifies, automates or connects critical machinery;
- introduces unattended running, new shifts, temporary labour or a materially different staffing model;
- moves premises, expands a site or changes how hazardous materials, stock or work in progress are accumulated;
- becomes materially dependent on one customer, programme, supplier, material, person, utility or digital system;
- changes a product, process, end use or market; or
- acquires another business or integrates an operation it does not yet fully understand.
This is not a notification checklist. It is a leadership prompt: has this decision changed the exposure, dependency, impact, controls or evidence position enough to require action?
Warning signs
- The only substantial risk or insurance conversation happens in the weeks before renewal.
- A new shift, machine, customer, process or operating arrangement was introduced this year and nobody considered its wider risk implications.
- No one owns the decision about whether a significant change should be escalated.
- Risk assessments are reviewed only on fixed annual dates rather than when work or equipment materially changes.
- Leadership cannot explain which policy conditions refer to changes in the business or who has checked them.
- A loss or near miss reveals that the recorded description of the business no longer matches how it operates.
- Capital expenditure and major contracts can be approved without a risk checkpoint.
- Renewal meetings repeatedly uncover changes that happened months earlier.
Six questions for the board
- What are the three most significant changes made since the last proper risk conversation—not merely since renewal?
- Which of them altered production dependency, maximum loss, contractual liability, safety or recovery time?
- Who decides whether an operational change requires internal, legal, insurance or other specialist review?
- Do we understand what the current policy requires us to notify and when, rather than relying on assumption?
- If a loss happened today, would the description of the business held by relevant advisers and insurers still match how it operates?
- What planned decision in the next twelve months would be expensive to revisit after signature, installation or launch?
Five actions to take now
- List what changed. Record the significant contracts, customers, machinery, sites, people, suppliers, systems and processes introduced during the current policy period.
- Create an internal trigger. Require a short risk review before a material change to how, what or where the business manufactures becomes routine.
- Name the owner. Give one person responsibility for coordinating the question across sales, operations, engineering, HR, finance and leadership.
- Check the actual contract. Ask the broker or appropriate adviser what the policy conditions require the business to notify and when; do not rely on memory or a generic rule.
- Record the response. For each material change, decide whether to understand, reduce, transfer, prepare for, escalate or deliberately accept the exposure—with an owner and review date.
The InduX view
The purpose of change-led risk review is not to create an approval committee for every factory decision. It is to stop the most consequential changes passing unnoticed because they happened between renewal dates.
Every successful manufacturer changes. The important question is whether the understanding of its risk changes at the same time.
Start with one simple test:
What has materially changed since the last proper risk conversation—and which change would be hardest to explain if a loss happened tomorrow?
Follow that change through exposure, dependency, impact, control, defensibility and response. Renewal can then perform the role it should have had all along: confirming a position that leadership has kept current, rather than discovering a business that no longer exists.
Sources and further reading
This article provides general information and prompts for management discussion. It is not legal, insurance, health and safety or other professional advice. Insurance obligations and coverage depend on the relevant contract, policy terms and circumstances. Appropriate specialist advice should be obtained for the business and change concerned.