Why Your Risk-Averse CRR Program Is Actually the Riskiest Thing You Are Doing

There is an irony at the center of Community Risk Reduction that almost nobody talks about.

CRR is, by definition, the systematic reduction of risk. It is the professional and organizational commitment to identifying hazards, analyzing vulnerabilities, and implementing strategies that make communities safer. The entire enterprise is oriented toward making bad things less likely to happen.

And yet the biggest threat to most CRR programs is not too much risk.

It is too little.

The departments that produce the weakest CRR outcomes are not always the ones with the smallest budgets or the least experienced prevention staff. They are often the ones whose programs are most carefully designed to avoid failure — to only do what is proven, to only reach who is easy, to only measure what looks good, and to only argue for what is already accepted. They have optimized their programs for institutional safety rather than community safety. And the community is paying the price for that optimization.

This article makes the case — directly and without apology — that risk aversion is one of the most significant and least discussed obstacles to effective CRR, pointing out the risk of playing it safe in CRR. It also names the places where that risk aversion shows up most clearly, inside fire departments and beyond them, and what calculated risk-taking in service of genuine community safety actually looks like.

What Investment Theory Got Right

In the 1950s an economist named Harry Markowitz developed what became known as Modern Portfolio Theory — work that eventually earned a Nobel Prize and fundamentally changed how investors think about risk.

The core insight was counterintuitive for its time. Avoiding all risk does not produce the best outcome. It produces a mediocre one. The optimal investment strategy is not the one that eliminates risk. It is the one that takes risk strategically — accepting it in the right places, in the right amounts, in exchange for returns that justify the exposure.

An investor who keeps everything in cash is technically safe. But they are losing ground every year to inflation and opportunity cost. Their risk aversion is not protecting them. It is slowly diminishing them.

The application to CRR is not perfect — communities are not investment portfolios and preventable deaths are not market losses. But the underlying logic maps more cleanly than it might initially appear. A CRR program that is designed primarily to avoid failure — to produce defensible activity metrics, to reach willing participants, to avoid controversial decisions — is the organizational equivalent of keeping everything in cash. Technically safe. Slowly diminishing. And ultimately producing returns far below what the investment could achieve if the risk tolerance were calibrated differently.

The question is not whether your CRR program takes risks. Every program takes them — including the risk-averse ones. The question is whether the risks you are taking are calculated and purposeful or default and unconsidered.

What Risk Aversion Looks Like in a CRR Program

Risk aversion in CRR rarely announces itself. It does not show up as cowardice or indifference. It shows up as reasonableness — as the accumulated weight of individually defensible decisions that together produce a program that is safe for the institution and inadequate for the community.

Here is what it looks like in practice.

Running programs that produce visible activity rather than invisible outcomes. Installing smoke alarms is visible. The metric is clear, the photo opportunity is available, and the annual report number is easy to defend. Addressing the underlying conditions that cause residents to live without working smoke alarms — poverty, isolation, language barriers, landlord neglect — is invisible, slow, uncomfortable, and produces no photo opportunities. The risk-averse program optimizes for the former and avoids the latter. The community’s risk profile does not meaningfully change.

Reaching the populations that are easiest to reach. Engaged residents who respond to prevention outreach, attend community events, and complete home safety surveys are the populations that voluntary programs naturally reach. They are almost never the highest-risk populations. The highest-risk residents — socially isolated, language-isolated, economically marginalized, medically vulnerable — require investment, persistence, and partnerships that are not guaranteed to produce quick measurable results. The risk-averse program reaches who is easy and calls it community outreach. The highest-risk residents remain unreached.

Measuring what looks good rather than what matters. Activity metrics — smoke alarms installed, home visits conducted, school presentations delivered — are easy to collect, easy to report, and easy to defend. They tell the story of a busy program. Outcome metrics — reduction in fire incident rates in targeted areas, measurable change in risk conditions in specific populations, reduction in repeat EMS calls at addresses that received intervention — are hard to collect, hard to attribute, and sometimes inconvenient. They tell the truth about whether the program is working. The risk-averse program measures activity because outcomes are risky — they might show that the program is not working, which is information nobody wants to present to a city council.

Making only the arguments that are already accepted. The risk-averse CRR leader makes the case for prevention using national statistics and program descriptions that nobody is likely to challenge. The calculated-risk CRR leader makes the local evidence-based argument that might generate pushback — presenting data that shows specific risk conditions in specific neighborhoods, making the case for specific interventions that challenge existing resource allocations, and being willing to say directly that the current approach is not producing the outcomes the community needs. The first conversation is comfortable. The second conversation is the one that produces change.

Protecting the institution rather than serving the community. This is the deepest and most uncomfortable form of CRR risk aversion — the instinct to protect the department’s reputation, avoid internal controversy, and never do anything that might generate criticism from within. The program that does not push into underserved neighborhoods because the community there has complicated relationships with public safety. The initiative that does not get launched because a senior officer thinks it is outside the department’s lane. The partnership that does not get built because it would require the fire department to acknowledge that another organization is better positioned to address a specific risk. All of these are institutional risk aversion dressed as organizational wisdom. And all of them cost the community something real.

The Calculated Risk Alternative

None of the above is an argument for recklessness. A CRR program that deploys resources without evidence, builds partnerships without accountability, or makes arguments without data is not taking calculated risks. It is just being sloppy.

Calculated risk in CRR looks like this.

Investing prevention resources in populations that are hard to reach and high-risk — knowing that the return will be slow, the metrics will be difficult to capture, and the effort may not produce visible results within a single budget cycle. Doing it anyway because the data shows that is where the risk is concentrated.

Building partnerships with organizations the department has never worked with — knowing that new relationships require investment of time and trust that might not pay off immediately. Doing it anyway because the partnerships are what extend the department’s reach into the populations it cannot access on its own.

Deploying technology that collects local data and delivers tailored risk reduction information at scale — knowing that the investment requires upfront resources and organizational change that will generate resistance. Doing it anyway because scale is the only honest answer to the scale of the risk.

Making the evidence-based argument for prevention investment to city managers and elected officials — knowing that the argument might not land the first time, or the second time, and that decision makers will push back with other priorities. Making it anyway, repeatedly, with better local data each time, because the alternative is a program that cannot sustain itself.

Calculated risk in CRR is the willingness to accept institutional discomfort in service of community safety. It is the recognition that the risk of doing nothing — or of doing only what is safe — is greater than the risk of doing something new, uncomfortable, and not guaranteed to succeed.

The External Version of the Same Problem

Risk aversion in CRR is not exclusively an internal fire service problem. It is a pattern that shows up wherever decisions about community safety are made — and nowhere more visibly than in the long-running resistance to residential fire sprinklers.

The evidence on residential fire sprinklers is not ambiguous. According to NFPA research, home fire sprinkler systems reduce civilian fire deaths by 81 percent compared to homes with no automatic extinguishing system. They reduce the fire death rate per 1,000 reported home fires by 82 percent. They reduce the average property loss per fire by 69 percent. These are not modest improvements. They are transformational outcomes supported by decades of documented evidence.

And yet the building industry has successfully resisted residential sprinkler requirements in most jurisdictions across the country — consistently and effectively — using arguments about cost, affordability, and consumer choice that position opposition to life-safety requirements as a form of consumer protection.

The affordable housing argument deserves specific attention because it is the one most frequently deployed and the one most frequently accepted without examination. Residential fire sprinkler systems add a cost to new construction — estimates vary but industry figures typically place it between one and two percent of total construction cost for a single-family home. The argument that this cost makes housing unaffordable — and that therefore the sprinkler requirement should not be adopted — is an argument that accepts a known and preventable risk of fire death in exchange for a marginal reduction in construction cost.

Put plainly: the argument is that it is acceptable for people to die in house fires so that new homes can be built slightly less expensively.

That is a risk tolerance decision. It is being made on behalf of the future residents of those homes — who did not participate in the decision and who will bear the consequence of it if their home catches fire.

The fire service professional who understands risk at a community level should be the most articulate voice in this conversation — armed with the evidence, clear about what the resistance is actually arguing, and willing to say directly that the cost argument does not hold up against the data. NFPA 13D, the standard for sprinkler systems in one and two family dwellings, provides the framework. The evidence supports the investment. The risk aversion of the building industry is producing preventable deaths in communities across the country.

This is the external version of the same problem that shows up internally in CRR programs — choosing institutional comfort over community safety, dressing risk aversion as fiscal responsibility, and letting the community bear the cost of decisions made in the interest of protecting something else.

The Honest Question

Return to the investment framework for a moment.

The investor who keeps everything in cash is not being prudent. They are making a choice — a choice to accept certain slow diminishment in exchange for avoiding the discomfort of uncertainty. That choice has a cost. The cost is the return they did not earn, the growth they did not achieve, the future they did not build.

The CRR program that plays it safe is making the same choice. Certain mediocrity in exchange for avoiding institutional discomfort. And the cost — measured in preventable fires, preventable injuries, preventable deaths, and communities that are less safe than they could be — is real even when it is invisible.

The honest question for every CRR leader is not whether their program takes risks. Every program takes them. The question is whether the risks being taken are the ones that serve the community — or the ones that protect the institution.

A program that only does what is proven and visible and comfortable is not a low-risk program.

It is a program that has transferred its risk onto the community it exists to serve.

That is the riskiest thing a CRR program can do.

Brent Faulkner, MAM, FO, is the CEO and Founder of Virtual CRR Inc.
A retired Battalion Chief from Anaheim Fire & Rescue, Brent brings 28 years of fire service experience, including leadership in structure fires, wildland operations, hazardous materials response, EMS incidents, and specialized rescue operations. He also served 17 years on a Type 1 Hazardous Materials Response Team.

A defining moment in Brent’s career came while leading Critical Infrastructure Protection (CIP) efforts at a DHS-recognized Terrorism Fusion Center. There, he oversaw initiatives to safeguard critical infrastructure from terrorism, natural disasters, and emerging threats — an experience that shaped his passion for Community Risk Reduction and ultimately led to the creation of Virtual CRR.

Brent holds a Master’s Degree in Management, a Bachelor’s in Occupational Studies, and Associate Degrees in Hazardous Materials Response and Fire Science.