Risk & Compliance 101 · Beginner · Startup · 8 min read · Updated
Insurance fundamentals
The types of business insurance that matter for Australian SMBs, how to decide what to insure and what to carry yourself, and how to avoid the gaps that only appear at claim time.
- Public liability: Injury or property damage to third parties caused by your business activities.
- Professional indemnity: Claims that your advice or professional service caused a client financial loss.
- Workers compensation: Compulsory in every state. Covers employees injured at work.
- Business assets: Buildings, contents, stock, tools and equipment against fire, theft and damage.
- Business interruption: Lost income and extra costs while you recover from an insured event.
- Cyber: Response costs, data recovery and some liabilities after a cyber incident.
Insurance is risk transfer: you pay a known premium so that an insurer carries a loss you could not afford on your own. It is one of the four ways of treating a risk, and for a small business it is usually the only sensible way to handle the rare, catastrophic events: a customer badly injured on your premises, a fire that destroys your stock, a professional error that costs a client a large sum.
The difficulty is not buying insurance; brokers and online platforms make that easy. The difficulty is buying the right cover, understanding what it excludes, keeping it in step with the business as it changes, and knowing how a claim actually works. This article covers those fundamentals so you can have an informed conversation with a licensed broker, who should make the final recommendation.
Why it matters
An uninsured loss can end a business that was otherwise healthy. Beyond protection, insurance is often a condition of trading: most commercial leases require public liability, most professional engagements require professional indemnity, government and large-company contracts set minimum limits, and workers compensation is a legal requirement in every state the moment you employ someone. Insurers are also increasingly asking about controls, so good risk management lowers premiums and improves the odds a claim is paid.
Decide what to insure and what to carry
Not every risk should be insured. Insurance makes sense when a loss would be severe relative to your resources and the premium is a small fraction of the potential loss. It makes less sense for small, frequent losses, which are cheaper to absorb as a cost of business, and for risks you can largely control with procedures. A risk register plotted on likelihood and impact shows you which risks fall where.
The excess, or deductible, is the tool for tuning this. A higher excess lowers the premium and means you self-insure the smaller events. Set it at a level the business could pay tomorrow without distress, and make sure you hold that amount. Insurance is for the losses above that line.
- Insure: Rare and large: fire, major injury claim, professional negligence. Classic insurance territory.
- Control first, then insure: Frequent and large: cyber incidents, vehicle accidents. Reduce the likelihood, then insure what remains.
- Carry: Rare and small: absorb it; insuring it costs more than it is worth.
- Procedures and excess: Frequent and small: breakages, minor theft. Manage with routines and a sensible excess.
Understand what each policy actually does
Public liability covers your legal liability for injury to people or damage to property caused by your business activities, from a customer slipping in your shop to a tradesperson damaging a client’s home. Professional indemnity covers claims that your advice, design or professional service caused a client financial loss; it is essential for consultants, designers, accountants, health practitioners and anyone whose product is expertise. Product liability covers harm caused by goods you make or sell. Many small businesses buy these together in a business pack.
Workers compensation is run by state and territory schemes, some through a government insurer and some through private insurers, and covers employees for work-related injury and illness. Asset covers protect what you own; business interruption covers the income you lose and the extra costs you incur while you recover from an insured event, and is the cover most often missing when a business cannot reopen for months. Cyber insurance typically covers incident response, data recovery, some third-party claims and sometimes extortion payments, with conditions about the controls you must have in place. Other covers, such as management liability, key person, vehicles and tools in transit, depend on your circumstances.
Avoid the gaps that appear at claim time
Most disappointing claims trace back to a handful of causes. Under-insurance is the biggest: if you insure stock for half its value, many policies reduce the payout proportionally. Non-disclosure is next: insurers can decline claims if you did not tell them something relevant, such as a change of activity, a prior claim or a new location. Then come lapsed policies, policies in the wrong entity’s name after a restructure, and limits that have not kept pace with contract requirements or business growth.
Insurance also needs to match your contracts. If a customer agreement requires professional indemnity at a certain limit or names them as an interested party, your policy must do that. If you have agreed to an indemnity that your policy would not respond to, you are carrying that risk personally. Review the two together whenever you sign anything significant.
- Insure assets and stock at replacement value, not book value, and update sums each year.
- Tell the insurer about every change in activity, location, turnover or structure.
- Check that the insured entity name matches the legal entity that trades.
- Match policy limits to the highest requirement in your contracts and leases.
- Diarise renewals and keep certificates of currency where clients can request them.
How a claim works
When something happens, notify your insurer or broker as soon as you can, even before you know the full extent. Most policies require prompt notification and prohibit admitting liability or making promises to the other party. Take photos, keep damaged items, gather receipts and records, and write down what happened while it is fresh. Mitigate further loss where you safely can, because insurers expect it and will usually cover reasonable costs of doing so.
Liability and professional indemnity claims often start as a complaint or a letter, long before anyone sues. Notify those too: many policies cover "circumstances that may give rise to a claim", and telling the insurer early is what preserves cover. Your broker is your advocate in this process, which is one reason many small businesses prefer a broker over buying direct.
How to build and maintain the right cover
- Start from your risk register Identify the rare, severe events you could not absorb. These define what you need to insure.
- Collect your contractual requirements Lease, customer contracts, industry licences and tenders set minimum covers and limits.
- Engage a licensed broker Describe your activities, turnover, staff, assets and plans fully. Non-disclosure is the enemy of claims.
- Choose covers and limits deliberately Insure for replacement value. Set an excess you can pay tomorrow without distress.
- Read the policy schedule and exclusions Confirm the entity name, activities described, limits and the key exclusions.
- Record what you hold A one-page insurance register: policy, insurer, limit, excess, renewal date and certificate of currency.
- Review at renewal and at every change New service, new site, new vehicle, a large new contract or a restructure all trigger a conversation with the broker.
Real-world example
A Ballarat electrician discovers what his policy did not cover
Goldfields Electrical is a sole trader with two apprentices. Jake bought a business pack online when he started, ticking public liability and tools cover, and has renewed it unchanged for four years. In that time he has taken on a second van, started doing solar installations, moved into a small workshop and incorporated as a company on his accountant’s advice. The policy still names him personally, describes him as a domestic electrician and insures tools at their original value.
A ladder fall injures an apprentice and the workers compensation claim is handled by the state scheme, which is in order. But when a solar inverter installation faults and damages a client’s switchboard, the insurer questions whether solar work was a disclosed activity and whether the insured entity is the company that did the work. The claim is eventually paid after a stressful month, with the broker’s help. Jake then redoes everything: cover moves to the company, solar work and the workshop are disclosed, tools are insured at replacement value, business interruption is added, and a renewal review with the broker goes into the calendar every June.
Common mistakes
- Renewing without reviewing The business changes every year; the policy does not unless you tell the insurer. Treat renewal as an annual review, not a payment.
- Insuring at book value Replacement cost is what you will need. Under-insurance can reduce the payout on even a partial loss.
- Skipping business interruption Rebuilding stock and premises is covered; the months of lost income while you do it often are not unless you add this cover.
- Not disclosing changes A new activity, site or structure that the insurer does not know about is the most common reason claims are questioned.
- Admitting liability on the spot Apologise and help, but let the insurer handle liability. Promises made at the scene can prejudice cover.
KPIs to track
- Covers matched to contract requirements Every lease and customer contract requirement met by a current policy at the required limit. Target: all.
- Sums insured versus replacement value Reviewed annually; a gap above about 10% means under-insurance risk.
- Premium as a share of revenue A useful trend indicator, often in the low single digits of percent for service businesses; rising sharply warrants a conversation with the broker.
- Days from incident to notification Should be measured in days, not weeks. Late notification is a common reason for disputed claims.
- Certificates of currency available on request Can you produce every certificate a client or landlord asks for within a day?
Frequently asked questions
Which insurance is legally required?
Workers compensation once you employ anyone, compulsory third party for vehicles, and in some professions and trades, professional indemnity or specific cover as a licence condition. Everything else is a commercial decision, often driven by contracts and leases.
Should I use a broker or buy online?
Online suits very simple businesses with standard risks. A licensed broker understands exclusions, matches cover to your contracts, and advocates for you in a claim. For most businesses with staff, premises or professional exposure, a broker is worth the commission.
Does public liability cover my work being faulty?
Generally no. Public liability covers injury or property damage caused by your activities; the cost of redoing defective work is usually excluded, and financial loss from poor advice falls under professional indemnity.
What does cyber insurance require of me?
Most insurers now expect multi-factor authentication, backups and updated systems as a condition of cover, and may decline a claim if a stated control was not in place. Read the proposal form carefully and answer accurately.
Key takeaways
- Insure the rare, severe losses you could not absorb; control or carry the rest.
- Policies pay for named events subject to exclusions; read the schedule, not the brochure.
- Match covers and limits to your contracts and leases, and insure at replacement value.
- Tell the insurer about every change in activity, location, turnover and structure.
- Notify early, document everything, and let the insurer handle liability.
This article is general information only, not financial, legal or tax advice.