The Business Insurance Audit (Including the Workers Comp Mod You Can Actually Dispute)

[IMAGE: A small business insurance binder on a desk opened to a workers compensation experience modification worksheet, with a calculator and declarations pages nearby]

Today's article in the Stop the Bleed series is one I have been looking forward to writing, because insurance is a category where small business owners reliably overpay, and the reasons they overpay are very fixable. I want to walk you through a full insurance audit — general liability, workers compensation, commercial auto, umbrella, property, cyber, and a couple of others — and I want to spend some real time on one specific subtopic: your workers compensation experience modification factor. That one number, which most owners have never looked at carefully, is often wrong, and when it is wrong, you are almost certainly paying too much. Disputes work. We will cover them in detail.

Before we begin, a word of caution. Insurance is the one expense category where the advice "cancel or downgrade" can be genuinely dangerous. The goal of an insurance audit is not to save money by becoming underinsured. The goal is to pay a fair price for coverage that is correctly matched to your actual exposure. Cheaper coverage that leaves a gap is worse than the premium you were paying. I will flag the lines where this matters.

Why small businesses overpay on insurance

There are three structural reasons insurance premiums drift higher than they should, and understanding them is helpful context for the audit.

The first is that insurance renewals happen automatically once a year, and most owners do not reshop at renewal. They read the renewal letter, note the new premium, wince, and pay it. The carrier knows this and prices the renewal knowing that only a fraction of customers will shop.

The second is that insurance is genuinely complicated. Policies have different structures, different exclusions, different endorsements, and different limits. Comparing two quotes in detail takes real work, and most owners do not have the time or patience. So they stay.

The third is that small businesses are usually bundled — general liability, property, auto, sometimes workers comp — into a package policy, often called a BOP (Business Owner's Policy) or a commercial package policy. Bundling is often good, but it hides the individual line items, and owners rarely ask whether the bundle is actually the best deal across all its components.

The audit I am going to describe takes those three structural factors and forces them open.

The three-year reshop cadence

The single most important discipline for insurance cost management is a scheduled reshop every three years, regardless of whether you are happy with your current carrier. Not every year — reshopping every year is exhausting and the variance is usually too small to justify the effort. Every three years is the sweet spot.

The reason is that insurance markets move in cycles. Carriers that were hungry for your class of business three years ago may not be today, and vice versa. Your own loss history, payroll, revenue, and operations have likely changed enough in three years that a fresh underwriting look will find a better match. A disciplined three-year rebid is the closest thing insurance has to a free lunch.

Your current broker will reshop your renewal if you ask — most brokers will shop your account to their full panel of carriers once every few years. But I would also recommend getting at least one quote from a broker outside your current relationship, because your broker's panel is limited to the carriers they write with. A second broker may access carriers yours does not.

The major policies, one by one

Let us walk through the core small-business insurance policies and what to look for in an audit of each.

General liability

This is the baseline coverage for most businesses — it covers bodily injury, property damage, and certain personal and advertising injury claims made against your business by third parties. Typical small-business limits are one million per occurrence and two million aggregate, though some industries carry higher.

In an audit, check the following:

• Class code. Every business is assigned a classification code that determines the rate. If your operations have changed since your last renewal — different services, different product mix, different customer base — your class code might be wrong. Wrong class codes are extremely common. Ask your broker what code you are rated under, look it up, and confirm it actually describes what your business does.
• Revenue used for rating. Your premium is based on an estimate of your revenue. If your actual revenue has been meaningfully lower than the estimate, you may be due a refund at the audit that happens after the policy year ends. If it has been higher, you may owe additional premium. Either way, the rating revenue should match reality, and if it is an old projection, update it.
• Exclusions and endorsements. Read the actual exclusions on your policy. Some exclusions are industry-standard and unavoidable. Others are aggressive and may surprise you at claim time. If you are paying for coverage and the exclusions gut it, you are paying for a policy that will not respond when you need it.
• Deductible. Raising your deductible from one thousand to two thousand five hundred dollars routinely drops premium by eight to fifteen percent. If you have the cash to self-insure the first couple of thousand on a rare claim, take the savings.

Commercial property

If you own your building, or you are required to carry coverage on leasehold improvements, property insurance is a significant line. In the audit:

• Building valuation. Is the insured value of the building current? In the last several years, construction costs have moved dramatically, and some policies are still rated on valuations from several years ago. Underinsured property is a real risk; overinsured is rarer but possible. Ask for a current valuation.
• Replacement cost versus actual cash value. Replacement cost is almost always the right choice, even though it carries a higher premium. Actual cash value (which deducts depreciation) can leave you meaningfully short at claim time.
• Business personal property and contents. The coverage on your inventory, equipment, and contents should match what you actually have, not a number from five years ago when you had less. Equipment additions should be reflected.
• Business interruption coverage. This is the line I most often find underinsured. If a fire or a covered loss shuts your business down for six months, business interruption pays your lost income and continuing expenses. The limit should match your actual monthly operating costs and profit, multiplied by a realistic shutdown period (typically twelve months). Many policies carry limits that were set years ago and have not kept pace.

Commercial auto

If your business has vehicles — whether owned, leased, or a personal vehicle used for business — commercial auto insurance comes into play. Audit points:

• Driver list. Is it current? Former employees should not be on the list; new drivers should be. Driver MVRs (motor vehicle records) drive premium directly.
• Vehicle list. Vehicles you no longer own should not be on the policy. Newly acquired vehicles should be added promptly.
• Hired and non-owned auto coverage. If employees drive their own cars for business, or if you rent vehicles occasionally, hired and non-owned auto coverage is cheap and prevents large gaps. Confirm it is on your policy.
• Limits. Commercial auto claims have climbed faster than almost any other line in the last decade. A two-million-dollar policy limit is increasingly on the low side for businesses with any meaningful driving exposure. Review the limit against modern verdict levels.

Umbrella

Umbrella coverage extends the limits of your underlying liability policies. For a small business with meaningful exposure — employees, vehicles, public access to premises — an umbrella is typically the cheapest per-dollar-of-coverage line on the policy. I recommend reviewing umbrella limits at every renewal. The incremental cost of raising an umbrella from one million to two million is usually small enough that it should not be the budget item you cut.

Cyber liability

This is a relatively new category for many small businesses and is increasingly important. Cyber policies cover a combination of first-party expenses (breach response, data recovery, business interruption from a cyber event, extortion/ransomware payments in some policies) and third-party liability (claims from affected customers or partners).

Premiums have risen substantially in the last three years as claim activity has grown. In the audit, confirm what kind of events are actually covered, what the deductibles look like, and whether the policy requires specific security controls (multi-factor authentication, endpoint protection, backup standards) to trigger coverage. A policy that excludes coverage for events where you did not maintain required controls is only as strong as your actual compliance with those controls.

For most small businesses, cyber coverage is worth carrying. For businesses that handle significant customer data — health, financial, personally identifiable information — it is not optional.

Professional liability (errors and omissions)

If your business provides professional advice or services — accounting, design, consulting, technology, medical, legal — E&O coverage protects against claims that your service was deficient and caused financial harm. Review limits against the size of your client engagements; a policy limit that is a fraction of a typical client's exposure can be inadequate.

Employment practices liability

EPLI covers claims from employees alleging wrongful termination, discrimination, harassment, or retaliation. For businesses with employees, and particularly in states with active plaintiff's bars, EPLI is advisable. Premiums are reasonable, and a single defense alone can cost more than years of premium.

Workers compensation: the one that deserves its own section

Workers compensation insurance is a legal requirement in most states for businesses with employees, and it is also the policy where I most often find recoverable money. The reason is that workers comp premium is driven by three factors — payroll by class code, the class code rate, and a multiplier called the experience modification factor, or "mod" or "e-mod" — and each of the three can contain errors.

Understanding the experience modification factor

Your mod is a number — typically between about 0.75 and 1.50 — that gets multiplied against the base premium your payroll and class codes would otherwise produce. A mod of 1.00 is average. Below 1.00 means your loss history is better than expected for businesses in your class, so your premium goes down. Above 1.00 means worse than expected, so it goes up.

The mod is calculated by an independent rating bureau — in most states, the National Council on Compensation Insurance (NCCI); a handful of states have their own bureaus — based on three years of historical loss data (excluding the most recent policy year). The calculation is reasonably complex, but the inputs are straightforward: your expected losses (based on payroll and class code) and your actual losses.

The mod is issued in a document called a worksheet, usually sent to your carrier, and from there passed to you. I would like you to do one specific thing: request a current copy of your mod worksheet from your broker or carrier. They are required to provide it. Read it carefully, or have someone help you read it. Because on about forty percent of them, there is an error, and some of those errors are costing you real money.

Common mod worksheet errors

• Claims included that should have been excluded. Some claims — certain subrogated claims, certain disallowed claims, claims that were ultimately found to be fraudulent — should be removed from the mod calculation but sometimes are not.
• Incorrect claim amounts. A claim that was reserved at thirty thousand dollars two years ago, and that has since settled for eight thousand, may still be reflected at the larger reserve amount. This inflates your mod.
• Medical-only claims treated as lost-time. Medical-only claims (where no work was missed beyond the waiting period) are given reduced weight in the mod calculation. If a medical-only claim was incorrectly coded as a lost-time claim, your mod is too high.
• Class code misassignment. If your business has been operating under one class code but your actual operations fit a different, lower-rated one, you have been overpaying for years. Correction applies to the current period and may warrant a conversation about past periods.
• Payroll errors. If payroll figures were overstated in prior years (for example, if overtime was included at the wrong rate or if owner/officer payrolls were miscategorized), your expected losses were overstated, and your mod math was off.
• Stale or duplicated claims. Occasionally a single claim is listed twice, or a claim that was closed years ago remains on the report. These are straightforward to correct once identified.

How to dispute a mod error

If you identify an error, the process is:

1. Write up the specific error, with documentation (claim files, medical reports, payroll records, etc).
2. Submit a formal correction request to the rating bureau in your state (NCCI in most states). Your broker can handle the paperwork, or an independent workers comp auditor can be engaged. Many auditors work on a contingency basis — they take a share of the recovered premium if successful and charge nothing if they cannot find an error.
3. The bureau investigates, issues a corrected mod if the error is validated, and the carrier issues a premium refund for the affected periods.

I have seen contingency auditors recover five to twenty thousand dollars for a single small business on a single mod revision. Even for businesses with modest workers comp premiums, a mod correction often pays back several years of the contingency fee.

Ghost policies for owner-only operations

If you are the only person on your business's payroll — you are an owner, no employees — you may not need a traditional workers comp policy. In most states, sole owners, partners, members of an LLC, and certain corporate officers can exempt themselves from workers comp coverage. If your business has been carrying a full workers comp policy while only covering exempt persons, you are paying for nothing.

Rules vary meaningfully by state. Check your state's exemption rules specifically. Some states require a formal exemption filing; some do it by default. Either way, an owner-only business should rarely be paying full workers comp premiums. A "ghost policy" — a minimum-premium policy that exists to satisfy certificate-of-insurance requirements for general contractors you work with — is often sufficient.

Pay-as-you-go workers comp

Traditional workers comp is priced on an estimated annual payroll, collected as a premium up front (or in quarterly installments), and then audited at year-end, at which point you either owe more or receive a refund. Pay-as-you-go workers comp ties the premium directly to actual payroll, calculated with each pay cycle through your payroll provider.

The advantage is cash flow and accuracy — you pay based on real payroll, not a projection, so you do not get hit with a large audit bill at year-end. Many payroll companies offer pay-as-you-go integration with specific carriers. If your workers comp carrier does not support it and your payroll does, there is likely a competing carrier that does. Worth a conversation at renewal.

Health insurance for small employers — briefly

Health insurance is the major category I am not going to cover in depth in this article, because it deserves a dedicated treatment. But I want to flag three things to consider.

First, if you have been offering the same group health plan for three or more years, reshop it. Small group plan pricing is specific to group composition and moves meaningfully each year. A three-year hold is usually a three-year overpayment.

Second, individual coverage health reimbursement arrangements (ICHRAs) and qualified small employer health reimbursement arrangements (QSEHRAs) are alternative structures where, instead of offering a group plan, the business gives employees a tax-free allowance to buy their own coverage on the individual market. For some small businesses — particularly those with five to fifty employees and diverse coverage needs — these structures are significantly less expensive than a group plan and produce better-fitting coverage for employees.

Third, if you cannot afford comprehensive coverage, consider whether a stipend (taxable) or limited reimbursement arrangement is more honest than offering nothing. A competitive benefits picture matters for hiring and retention, but you can structure it flexibly.

The audit sequence — concrete steps

Here is how I walk a client through a full insurance audit. Set aside a half day once a year, timed a few months before your renewal.

Step one: gather declarations pages for every policy

Pull the "dec page" for each active policy. This is the one- or two-page summary of coverages, limits, deductibles, and premium. Put them on a table. Next to each, write three things: the premium, the renewal date, and the carrier.

Step two: request a current mod worksheet

Ask your broker to send you your current workers compensation mod worksheet. Read it. Note the three years of loss data and the expected versus actual loss columns.

Step three: confirm class codes on every policy

For each policy, confirm the class code matches your actual operations. If it does not, this is usually the single highest-impact correction you can make.

Step four: confirm exposures are current

Payroll figures, revenue figures, property valuations, vehicle lists, driver lists — all of these should reflect reality. Any one of them out of date is either overpayment or a dangerous gap.

Step five: request a full policy review from your current broker

Tell your broker you are doing an annual review and ask them to walk you through every policy. Ask what exclusions matter. Ask what endorsements you could add that would be meaningful for your business. Ask what endorsements you are paying for that you do not need.

Step six: get two competing quotes from outside brokers

In addition to your current broker's renewal, get at least two proposals from independent brokers. Provide them with the same information your current broker has. Ask each to propose the same coverage structure at comparable limits. Compare the three side by side on a single page. If your current broker cannot match, consider switching; if they can, you have gained a renewal at market rates without changing relationships.

Step seven: consider a workers comp audit specialist

If your workers comp premium is material — above about fifteen thousand dollars a year — engage an independent workers comp auditor on contingency for a full audit. They look at class codes, mod worksheets, payroll categorization, claim reserves, and every other input. If they find an error, you pay them a share of the recovery. If they do not, you pay nothing. There is no reason not to do this every three years.

Step eight: adjust deductibles consciously

For each policy, consider whether a higher deductible (which you can self-insure up to) would save enough premium to be worth it. For stable, well-capitalized businesses, raising deductibles across the insurance portfolio often produces meaningful savings.

A word on brokers

The broker you work with matters a lot. A good small-business broker is an advocate who understands your business, shops your renewal actively, flags coverage gaps, and negotiates claims on your behalf. A mediocre broker collects the renewal and moves on. You want the first kind.

If your broker has not asked you to walk through your business in the last three years, has not offered to shop your renewal to multiple carriers, or cannot answer specific questions about your mod worksheet without going back to the carrier, those are signs the relationship may have drifted. A broker change, handled professionally at renewal, is not dramatic and is sometimes the single best thing an owner can do for their insurance line.

Claims management as premium management

One additional point worth making: how you handle small workers comp claims affects your mod for three years. A claim that seems small today — a minor strain, a first-aid incident — can carry forward as a "lost-time" claim in your mod calculation if it is coded that way initially, even if the ultimate cost is modest.

Two specific practices help. First, for any minor incident, the employee should be seen by a provider your carrier has designated for workers comp care rather than a general-practice physician. Designated providers understand the coding distinction between medical-only and lost-time, and they document care in ways that are mod-appropriate. Second, return-to-work programs — where an injured employee is brought back to modified or light duty as soon as medically appropriate — convert what might have been a lost-time claim into a medical-only claim. The difference in mod impact is substantial.

For businesses with meaningful workers comp exposure, a formal written return-to-work policy and a relationship with a designated occupational health provider pay back many times over in reduced mod impact. These are not aggressive cost-cutting measures — they are legitimate workforce management practices that happen to align with premium management.

One specific exercise this week

Before you do the full audit, I want you to do one thing this week. Request your current workers compensation experience modification factor worksheet from your broker. Just ask. The email can be two sentences. "Please send me my most recent mod worksheet. I would like to review it as part of our annual insurance review."

When it arrives, look at it. If you do not understand it fully, that is fine — most owners do not on first read. The point of this exercise is to break the habit of never looking. The worksheet will arrive. You will read it. You may see something that prompts a question. That question is where the audit begins.

If the answer to the question is "there is an error here," you have potentially recovered several thousand dollars with one email. If the answer is "everything looks right," you have gained confidence that your workers comp premium is fair. Either way, you are ahead of where you were before you asked.

Insurance is a category where the stakes of getting it wrong — either underinsured or overpaying — are meaningful, and where the discipline of a regular, honest review is worth real money over the life of a business. Run the audit. Ask the questions. Reshop every three years. If the audit uncovers more than you can unwind — disputes, classification errors, coverage gaps, or a pattern of overpayment across several policies — Hamilton & Merchant's cost reduction service handles insurance audits directly, and an independent broker in our network can quote alongside your current one. But most of what I described, a careful owner can do in an afternoon with a broker who is paying attention.