- Get link
- X
- Other Apps
Risk Management
➡ Entrepreneurship and Innovation — Part II: Developing the Business Plan Home Page
Last Verified: 2026-09-24 | Author: Kateule Sydney | Published by Kat-Syd Resources Hub
Risk management converts uncertainty into decisions the venture can act on before problems become fatal.
Summary: This post examines risk management across four foundational sections: identifying potential pitfalls, contingency planning, legal structures, and intellectual property protection. Each section addresses the five core elements (why, what, when, who, how), followed by paired international and emerging-market cases and a blog analysis of pros and cons.
Method: This post is written as case-based analytical writing. It does not claim personal experience. All cases are drawn from public sources and analysed through an original lens. Every section addresses the five core elements — why, what, when, who, and how — then closes with a blog analysis of pros and cons. Sources are listed in the reference block at the end of each section.
Introduction — Risk Management
In Vietnam, where the startup ecosystem has grown rapidly and now includes approximately 4,000 technology startups, the failure rate remains stark: over 90 percent of startups fail at the beginning of their entrepreneurial journey, and 92 percent fail within the first three years, primarily due to the absence of suitable market strategies and a lack of prior knowledge. Even more striking, less than 5 percent of Vietnamese startups survive their first year according to one foreign investment fund director.
Risk management is the discipline of identifying, assessing, and mitigating the uncertainties that threaten a venture’s survival. The possibility of loss, harm, or adverse outcomes resulting from uncertainty in business decisions, external factors, or operational failures is the definition of risk that every entrepreneur must internalise. The framework governing this post combines risk identification through SWOTT and PESTLE analysis, contingency planning based on cash flow discipline, legal structure selection grounded in liability and taxation trade-offs, and intellectual property strategy aligned with venture stage and market context.
This post covers risk management, structured across four sections. Every section addresses the five core elements of the subject — why it is done that way, what is supposed to be done, when it is done, who does what, and how it is supposed to be done — followed by a blog analysis of the pros and cons grounded in paired international and emerging-market cases.
- Identifying Pitfalls — How to see the risks that most founders miss
- Contingency Planning — Preparing for the cash flow emergencies that kill otherwise viable ventures
- Legal Structures — Choosing the entity that matches liability, taxation, and growth objectives
- Intellectual Property — Protecting the assets that often constitute a startup’s entire value
The analytical approach treats risk management as a discipline of anticipation: the entrepreneur who sees the risks clearly and plans for them survives; the entrepreneur who does not, fails.
Chapter 1 — Identifying Potential Pitfalls
Definition. Risk identification is the process of systematically cataloguing the internal weaknesses, external threats, and emerging trends that could undermine a venture. The SWOTT framework extends traditional SWOT analysis by adding a fifth dimension — Trends — to capture future-oriented patterns that shape the environment in which businesses operate. PESTLE analysis evaluates external factors across six categories: Political, Economic, Social, Technological, Legal, and Environmental. Together, these tools provide a structured method for identifying risks that intuition alone would miss.
Explanation. Risk identification operates through a principle of structured scanning. SWOTT examines internal strengths and weaknesses alongside external opportunities and threats, then adds a trends layer to anticipate how today’s environment may evolve. PESTLE ensures systematic coverage of external forces that entrepreneurs often overlook, including regulatory changes, currency fluctuations, and shifts in consumer values. The process unfolds through four stages:
- Stage 1: Internal Assessment — Identify strengths to leverage and weaknesses to address
- Stage 2: External Scanning — Map opportunities and threats in the competitive environment
- Stage 3: Trend Analysis — Anticipate directional shifts in technology, regulation, and consumer behaviour
- Stage 4: Risk Prioritisation — Rank risks by likelihood and potential impact
The interpretive insight is that risk identification should be ongoing, not reactive. A venture that conducts a single risk assessment at founding and never revisits it is operating on stale assumptions.
The Five Core Elements.
- Why it is done that way — Entrepreneurs face a reality that most will not survive: approximately 50 percent of small businesses fail in the first year and many do not achieve a profit until their third year. Structured risk identification exists to prevent founders from being blindsided by foreseeable threats.
- What is supposed to be done — The entrepreneur must systematically scan internal operations, external markets, and emerging trends, documenting each risk with an assessment of its likelihood and potential impact.
- When it is done — Risk identification begins before launch and continues continuously. PESTLE analysis should be conducted quarterly to scan for new threats, while SWOTT analysis should be conducted annually to guide strategic shifts.
- Who does what — The founding team leads the assessment; external advisors, industry experts, and customers provide critical input on risks the team may not see.
- How it is supposed to be done — Through structured frameworks including SWOTT and PESTLE, supplemented by industry research, competitive intelligence, and customer interviews.
Case study. Vietnam’s startup ecosystem illustrates the consequences of inadequate risk identification. Despite rapid growth — Vietnam ranks 44th of 132 countries on the innovation index and third in ASEAN for startup ecosystem growth — the failure rate remains devastating: only 32 percent of startups survive three years, below the ASEAN average of 45 percent. The primary causes are identified as the absence of suitable market strategies and a lack of prior knowledge, meaning founders failed to identify the most fundamental risks before they became fatal. In contrast, the German Patent and Trade Mark Office’s first steps framework for startups provides a structured risk identification approach that explicitly guides founders through IP audits, freedom to operate analysis, and competitive landscaping before significant investment. The lesson is that structured identification of even one major risk — a competitor’s patent, a regulatory barrier, a market timing error — can be the difference between survival and failure.
Blog Analysis — Pros and Cons. The evidence from Vietnam’s startup ecosystem and the DPMA framework supports the following assessment.
- Pros: The SWOTT framework’s addition of trends to the traditional SWOT model addresses the most common failure of risk identification: focusing on current threats while missing emerging ones. PESTLE’s structured coverage of six external categories ensures that founders do not overlook regulatory, environmental, or political risks. The DPMA’s IP audit framework provides a concrete, actionable tool for identifying intellectual property risks before they materialise.
- Cons: Risk identification frameworks can become box-ticking exercises. A founder who completes a SWOTT and PESTLE analysis but does not act on the findings has achieved nothing. The Vietnam case demonstrates that even when risks are known — lack of market strategy and prior knowledge are not hidden — founders may lack the resources or willingness to address them. In emerging markets, data for PESTLE analysis may be unreliable or unavailable, making risk assessment speculative.
Chapter 2 — Contingency Planning
Definition. Contingency planning is the process of preparing for adverse events before they occur, ensuring that the venture has both a plan and the resources to respond when risks materialise. A critical component is cash flow management: understanding that net profit is not net cash, and that a profitable business can still fail if it runs out of operating cash. Under-funding is one of the more common causes of small business failure, and it takes many forms: failing to anticipate start-up overhead, underestimating operating expenses, not accounting for shrinkage and late payments, and failing to plan for the timing of payments.
Explanation. Contingency planning operates through two disciplines: financial resilience and operational response. Financial resilience requires understanding the difference between the income statement and the cash flow statement — depreciation must be shown as a cost in the profit and loss statement, but it is not a cash payment shown in the cash flow accounting. The cash basis of accounting requires recording income only when cash is received and expenses only when the item is paid for. Operational response requires identifying what actions will be taken if specific risks materialise. The process unfolds through four components:
- Component 1: Cash Flow Forecasting — Projecting when cash will come in and when it must go out
- Component 2: Contingency Reserves — Setting aside capital to cover unexpected shortfalls
- Component 3: Response Protocols — Defining in advance what will be done if key risks occur
- Component 4: Insurance and Hedging — Transferring risks that cannot be mitigated internally
The interpretive insight is that the timing of payment is perhaps the most painfully ironic cause of business failure: if a manufacturer is too successful, the cost of purchasing equipment and materials plus meeting payroll might exceed the revenue actually coming in each month, and although the company would be profitable at the end of the year, it will run out of operating cash.
The Five Core Elements.
- Why it is done that way — A venture that does not plan for adverse events is gambling on everything going right, which is not a strategy. Contingency planning can be the difference between survival and shutdown.
- What is supposed to be done — The entrepreneur must project cash flows with realistic assumptions about payment timing, set aside reserves, and define response protocols for the most likely and most damaging risks.
- When it is done — Contingency planning occurs during the business planning phase and is updated as the venture evolves and new risks emerge.
- Who does what — The founding team develops the cash flow forecast and contingency reserves; the board or advisors review the plans for adequacy.
- How it is supposed to be done — Through cash flow accounting that tracks the timing of payments and expenses based on the hard costs of doing business, and through insurance products and financial tools that manage risks which cannot be mitigated internally.
Case study. The under-funding problem described in the entrepreneur’s IP and business handbook illustrates a classic contingency planning failure. A manufacturer makes a $500 item and sells it on a thirty-day net sales agreement, expecting payment within thirty days. But there are two additional delays: the time between receipt of the order and delivery, and payment delay, with many customers taking closer to sixty days to pay and some taking even longer than ninety days. As business expands, the manufacturer needs to purchase parts and materials. If the business is too successful, the cost of purchasing equipment and materials plus meeting payroll and paying rent might exceed the revenue actually coming in each month. Although profitable at the end of the year, the company runs out of operating cash because its costs to meet growing demand exceed the payment from previous sales. In contrast, the German DPMA’s guidance for startups includes setting up processes to manage IP rights and establish mechanisms to detect and handle unauthorised copying, a form of contingency planning that protects against competitive risks. The lesson is that contingency planning must address both financial and non-financial risks, and that cash flow timing is often the most dangerous.
Blog Analysis — Pros and Cons. The evidence from the under-funding case and the DPMA framework supports the following assessment.
- Pros: The emphasis on cash flow management addresses the most common cause of small business failure: running out of cash despite being profitable. The distinction between accrual and cash basis accounting clarifies why a profitable venture can fail. The DPMA’s emphasis on setting up IP monitoring processes demonstrates that contingency planning applies beyond finance to include competitive and legal risks.
- Cons: Cash flow forecasting is notoriously difficult for new ventures without historical data. The manufacturer example assumes payment delays of 60 to 90 days, but the actual delay depends on customer behaviour that may not be predictable. Contingency reserves reduce the capital available for growth, creating a tension between resilience and expansion. In emerging markets, insurance products and financial hedging tools may be unavailable or prohibitively expensive.
Chapter 3 — Legal Structures: LLC, S-Corp, or Sole Proprietorship
Definition. A legal structure is the form of organisation a venture adopts, determining its liability protection, tax treatment, and capacity to raise capital. The primary options are sole proprietorship, partnership, LLC, S-Corporation, and C-Corporation. An S-Corporation is not a separate entity type but a tax election filed on top of an existing LLC or corporation. A C-Corporation is the standard structure for venture-backed startups, required by most investors for SAFEs, convertible notes, and priced rounds.
Explanation. Legal structure choice operates through three interdependent factors: liability protection, taxation, and growth objectives. Sole proprietorships and general partnerships offer no liability protection — personal assets are at risk for business debts and lawsuits. LLCs provide liability protection while allowing pass-through taxation, meaning profits and losses flow to members’ personal returns. S-Corporations avoid double taxation and can reduce self-employment taxes, but they are limited to 100 shareholders, all of whom must be U.S. citizens or residents, and can issue only one class of stock. C-Corporations face double taxation but can issue multiple classes of stock to unlimited shareholders, making them the only structure acceptable to most venture capitalists. The section unfolds through four decision factors:
- Factor 1: Liability Protection — Whether personal assets are shielded from business obligations
- Factor 2: Tax Treatment — Pass-through versus corporate taxation, and self-employment tax implications
- Factor 3: Financing Requirements — Whether the venture plans to raise venture capital or issue stock options
- Factor 4: Administrative Burden — The compliance requirements of each structure
The interpretive insight is that entity selection is a strategic decision, not a legal formality. A Delaware C-Corporation is required for venture capital and provides Qualified Small Business Stock eligibility that can exclude up to $10 million in exit gains from federal tax. An LLC is simpler and more flexible but cannot offer incentive stock options or attract most institutional investors.
The Five Core Elements.
- Why it is done that way — The choice of legal structure affects taxes, personal liability protection, and how easy it is to raise money or bring on partners. A structure that is wrong for the venture’s growth plans can delay deals, create tax inefficiencies, or expose founders to personal liability.
- What is supposed to be done — The entrepreneur must select a legal structure that matches the venture’s liability exposure, tax situation, and capital-raising plans, and then formalise the structure with the appropriate state filing and governing documents.
- When it is done — Legal structure selection should occur before the venture begins operations or generates revenue, as many jurisdictions require registration once income is generated.
- Who does what — The founding team makes the decision with input from legal and tax advisors; the entity is formed through state filing.
- How it is supposed to be done — Through a structured comparison of liability protection, tax treatment, administrative burden, and financing capacity, with reference to the specific jurisdiction’s requirements.
Case study. The venture capital context illustrates the practical implications of legal structure choice. Most venture capitalists will not invest in an LLC and require conversion to a C-Corporation before funding. Delaware C-Corporations are the standard because they allow multiple stock classes, provide Qualified Small Business Stock eligibility, and support tax-free reorganisations under Section 368. In contrast, a solo consultant or freelance business that does not plan to raise capital or issue stock options would find an LLC more appropriate: easier to maintain, more affordable, and offering pass-through taxation without the double taxation of a C-Corporation. The lesson is that the “right” legal structure depends entirely on the venture’s specific context: a tech startup planning a Series A needs a Delaware C-Corporation, while a freelance consultancy needs an LLC.
Blog Analysis — Pros and Cons. The evidence from the entity comparison frameworks supports the following assessment.
- Pros: The comparison frameworks provide clear decision criteria: liability protection, tax treatment, financing capacity, and administrative burden. The distinction between entity type (LLC, Corporation) and tax election (S-Corporation) clarifies a common source of confusion. The emphasis on Qualified Small Business Stock eligibility for C-Corporations highlights a tax benefit that many founders overlook.
- Cons: Entity selection is often driven by investor requirements rather than the founder’s interests. A C-Corporation is necessary for venture capital but creates double taxation and significant administrative burden that a bootstrapped venture would avoid. The administrative requirements of corporations — board meetings, minutes, annual reports, franchise taxes — can be a distraction for early-stage founders. In emerging markets, the available structures may differ significantly from the U.S. framework, and the decision may be constrained by local registration requirements and tax regimes.
Chapter 4 — Intellectual Property Protection
Definition. Intellectual property encompasses the legal rights that protect creations of the mind, including patents, trademarks, copyrights, designs, and trade secrets. A patent can be granted for an invention that is novel, useful, and non-obvious, providing the exclusive right to prevent others from making, using, or selling the invention for 20 years. Copyright protects original literary, dramatic, musical, or artistic works, including software code, and lasts for the lifetime of the author plus 70 years. Trademarks protect names, logos, or symbols that identify a brand and can be renewed indefinitely. Trade secrets protect confidential information such as manufacturing processes or proprietary methods, but are only valuable as long as they remain secret.
Explanation. IP protection operates through a strategic framework: identify what can be protected, determine what must be protected, and define how to protect it. An IP audit helps companies understand what potential there is for handling patents, trademarks, designs, and copyrights, and what strengths, weaknesses, opportunities, and risks exist. Critical risks include failing to transfer IP rights from freelancers or early team members who created works before the company was formed. IP rights can be transferred by law through employment contracts or by agreement with contractors, and if IP rights are not formally transferred, the creator remains the IP owner. The section unfolds through four IP categories:
- Category 1: Patents — Protect technical inventions; 20-year exclusivity in return for public disclosure
- Category 2: Trademarks — Protect brand identifiers; renewable indefinitely
- Category 3: Copyrights — Protect creative works including software; automatic upon creation
- Category 4: Trade Secrets — Protect confidential information; valuable only while secret
The interpretive insight is that IP is often the startup’s most valuable asset, and failing to secure it is a dealbreaker in investment. Code written on personal devices, designs created by freelancers, and rights left unassigned can become a stumbling block not only between founders but also in getting investment.
The Five Core Elements.
- Why it is done that way — IP protection provides competitive advantage by preventing competitors from copying innovations, increases company value by signalling credibility and long-term revenue potential to investors, and creates licensing opportunities even without bringing the product to market.
- What is supposed to be done — The entrepreneur must identify what IP can be protected, determine which IP is critical to business success, and secure those rights through registration, contracts, or confidentiality measures.
- When it is done — IP strategy should be developed early, before significant investment in product development. Trademark searches should be conducted before brand adoption, and patent filings should occur before public disclosure.
- Who does what — The founding team identifies IP; IP attorneys or technology transfer offices handle registrations and contracts; all employees and contractors must have IP assignment clauses in their agreements.
- How it is supposed to be done — Through an IP audit, freedom to operate analysis, trademark search, patent filing where appropriate, and IP assignment agreements with all contributors.
Case study. The DPMA’s first steps framework for startups illustrates effective IP strategy development. Step 1 is identifying what can be protected through an IP audit, using tools like WIPO IP Diagnostics. Step 2 is identifying what must be protected by ranking IP according to relevance for business success. Step 3 is defining the IP rights strategy through legal measures including registration, monitoring, and confidentiality agreements, and organizational measures including defined responsibilities and budgets. In contrast, the REVERA legal pitfalls framework documents the common failure mode: code written by freelancers without formal IP transfer, designs created by third parties without assignment, and IP rights left unassigned. This creates a due diligence problem that can cause investors to walk away or delay deals. The lesson is that IP protection is not optional: in tech startups, IP is often the most valuable asset, and the failure to secure it can destroy the venture’s value.
Blog Analysis — Pros and Cons. The evidence from the DPMA framework and the REVERA legal pitfalls supports the following assessment.
- Pros: The structured IP strategy framework from DPMA provides a clear path from identification to protection. The emphasis on IP assignments for freelancers and early contributors addresses the most common source of IP disputes. The DLA Piper guidance clarifies the distinction between copyright (specific expression of code) and patents (underlying functionality), a common source of confusion.
- Cons: IP protection is expensive, and the costs must be weighed against the likelihood of enforcement. Patent registration can cost tens of thousands of dollars, a prohibitive sum for early-stage ventures. The DPMA framework acknowledges that not every IP has the same importance, and that in seed stages, ventures should rank IP according to relevance. In emerging markets, IP enforcement mechanisms may be weak, reducing the practical value of registration. The open-source software model demonstrates that not copyrighting code can unlock positive benefits including greater visibility, community engagement, and cost-effective development.
You Might Also Want to Read
Agency and Employment Law Series — Reference series on the legal relationships between principals, agents, and employees in business operations.
Torts, Intellectual Property & Privacy Law — Series Home — Comprehensive coverage of tort liability, IP frameworks, and privacy regulation.
Entrepreneurship and Innovation Part I — Ideation and Opportunity Recognition — The entrepreneurial mindset, source of innovation, opportunity assessment, business model canvas, market validation, and industry analysis.
Comments
Post a Comment