Risk transfer

Contracts and insurance move who pays. They do not move who is disrupted, and they rarely move regulatory accountability.

Your supplier being liable does not restore your service. Your insurer covering the loss does not answer the regulator or the customers. Transfer is a real and useful financial control, and it is routinely described as if it removed the operational risk, which it does not.

Checked against the primary source.

More on Governance & risk