Why Risk Management Gets Ignored
Solo consultants under-invest in risk management because the risks feel theoretical until they are not. Then they are catastrophic. The professional indemnity claim, the client insolvency that wipes out a quarter of revenue, the data breach, the engagement that goes wrong and ends in a contractual dispute — each of these is rare individually and certain across a career.
This guide covers the five categories of risk that actually take down independent consulting practices, with the specific hedges that work. None of it is glamorous. All of it is cheaper than the alternative.
Risk 1: Professional Indemnity
The risk: a client claims your advice caused them financial loss and sues for damages. Even when the claim is meritless, defending it without insurance costs more than most independents earn in a year.
The hedge:
- Professional indemnity cover of £1–2M minimum. Premium varies by territory and sector; in the UK, £1M cover for a general management consultant runs £400–900 per year. In the US, equivalent E&O cover runs $800–2,500.
- The cover must be "any one claim," not "in the aggregate." A claim that consumes the policy limit must still leave full cover for the next claim.
- Run-off cover when you wind down. Most claims arise years after the engagement. Six years of run-off is standard; for high-risk niches consider longer.
- A contractual liability cap. Every client engagement should cap your liability at the fees paid under the engagement. This is the single most important contract clause for an independent consultant.
The combination of insurance and a contractual cap means the worst plausible outcome is the loss of one engagement's fee, not the loss of the practice.
Risk 2: Client Concentration
The risk: one client represents more than 30% of revenue. When they leave, restructure, or go through a procurement freeze, you lose a quarter of the year overnight.
The hedge:
- The 30% rule. No single client should be more than 30% of your trailing twelve months of revenue. When a client breaches the 30% line, the next three months of business development goes into diversification.
- The two-engagement minimum per client. Single-engagement clients are at high churn risk. The transition to two or three concurrent engagements per major client is also the transition to a stable practice.
- A pipeline that always covers 3× the next quarter. When a major client leaves, you have 90 days of cover from the pipeline to land replacement work.
Risk 3: Cash Flow
The risk: profitable engagements that pay 60–90 days after delivery, against monthly outgoings that pay 30 days from invoice. Profitable practices die of cash starvation more often than unprofitable ones die of losses.
The hedge:
- Milestone invoicing on every engagement above £15,000. 25% at signature, 25% at inception, 25% at mid-term, 25% on delivery. This pulls cash forward by 60–90 days versus invoice-on-completion.
- Net 30 terms, chased on day 31. Late payment is not a relationship issue; it is a commercial issue. Chase consistently. The clients who are uncomfortable with being chased are the clients you cannot afford to keep.
- Three months of operating reserves. As soon as cash allows, build a reserve equivalent to three months of personal and business outgoings. It changes the engagements you are willing to walk away from and the rates you are willing to defend.
- A line of credit, drawn before you need it. A £25,000 facility opened in a healthy quarter is dramatically easier to negotiate than one applied for during a cash squeeze.
Risk 4: Reputational
The risk: a single engagement that goes badly produces a reputational signal in a small niche that takes years to overcome.
The hedge:
- Scope discipline. Engagements outside the niche are higher-risk delivery for lower-leverage reference value. Pass them or sub-contract them.
- Reference call hygiene. Every closed engagement should be followed by a 20-minute reference conversation with the sponsor: what worked, what did not, would they hire you again, would they refer you. Issues surface in that conversation that would otherwise leak as quiet anti-referrals.
- A formal complaints process. Even a one-person firm should have a written complaints process the client can invoke. It signals professionalism, and it gives a dissatisfied client an internal channel before they go external.
- No public arguments. Reputational damage in consulting is overwhelmingly self-inflicted by the consultant who responds publicly to a private dispute.
Risk 5: Personal and Operational
The risk: the consultant is the business. Illness, family events, burnout, or the loss of a key working relationship can stop revenue overnight.
The hedge:
- Income protection insurance. Replaces 60–75% of income if illness prevents work, with cover from week 4 or week 13 depending on policy. Annual cost typically 1–2% of insured income.
- A nominated continuity contact. A trusted peer who has agreed in advance to step in to inform clients and pause engagements if you are incapacitated for more than two weeks. Awkward conversation; essential conversation.
- Documented engagement state. Each live engagement has a one-page brief sufficient for another consultant to pick up the file. Maintained weekly, not at the end.
- An operational buffer in the diary. A practice booked to 90% utilisation has no resilience. 60–70% leaves room for the unexpected without missing client commitments.
- Annual leave that is actually taken. Burnout is not a badge; it is the leading cause of consultants leaving the profession. Two-week annual breaks are minimum.
The Quarterly Risk Review
Sit down once a quarter with the five risk categories and answer one question for each: what has changed in the last 90 days that increases or decreases my exposure? Adjust insurance cover, pipeline diversification, cash reserve target, and contract terms accordingly. The review takes 30 minutes; it is the cheapest insurance the practice has.
When the Bad Thing Happens
A claim, a major late payment, a sudden client loss, a breach. The discipline in the moment:
- Triage in writing. Email yourself a one-page summary of what happened, when, what you know, and what you do not know. Calms thinking and produces a contemporaneous record.
- Notify your insurer. Most professional indemnity policies require notification of potential claims, not just actual ones. Failure to notify can invalidate cover.
- Engage your lawyer early. A £500 conversation in week one prevents a £50,000 problem in month six.
- Stop talking publicly about the engagement immediately. Everything you say becomes evidence.
Where to Take This Next
- For the contract clauses that limit liability, see contract clauses you should never sign blind.
- For the pricing models that improve cash flow, see consulting pricing models explained.
- For NDA hygiene specifically, see the consulting NDA clauses guide.