---
title: "hazard, exposure, vulnerability"
canonical_url: https://ensurance.app/guide/hazard-exposure-vulnerability
markdown_url: https://ensurance.app/guide/hazard-exposure-vulnerability.md
subtitle: "the three things a loss is made of, which one each kind of mitigation moves, and the one that is shaped by the land"
category: natural-capital
---

# hazard, exposure, vulnerability

*the three things a loss is made of, which one each kind of mitigation moves, and the one that is shaped by the land*

**Hazard exposure vulnerability** is the short name for the three things a loss is made of. **Hazard** is what arrives: the water depth, the flame, the wave. **Exposure** is what stands in its way: the house, the road, the people. **Vulnerability** is how badly what stands there is damaged by what arrives. Change any one and the loss changes.

A stronger roof works on vulnerability. Moving a building works on exposure. Neither changes how deep the water is or how hot the fire runs when it reaches the wall.

Much of that is shaped by the land around the building. The floodplain upstream holds water, the reef takes energy out of waves, coastal wetlands blunt the flood, and the condition of the forest shapes how hard a fire runs. They shape the hazard that reaches a building whether or not anyone pays for them, within limits: a record flood overtops any floodplain, and no marsh stops every surge. [**Ensurance**](/manual/ensurance?from=guide) is how the people who depend on that ground can pay for its keeping. It is not the floodplain, and it does not harden a roof.

The hub, [mitigation means two different things](/guide/mitigation-means-two-different-things?from=guide), sorts the word's two meanings.

## the three terms, defined

The Intergovernmental Panel on Climate Change (IPCC) defines all three in its 2023 glossary:

- **Hazard:** "The potential occurrence of a natural or human-induced physical event or trend that may cause loss of life, injury … as well as damage and loss to property…"
- **Exposure:** "The presence of people; livelihoods; … infrastructure; or economic, social, or cultural assets in places and settings that could be adversely affected."
- **Vulnerability:** "The propensity or predisposition to be adversely affected. Vulnerability encompasses … sensitivity or susceptibility to harm and lack of capacity to cope and adapt."

And risk: "risks result from dynamic interactions between climate-related hazards with the exposure and vulnerability of the affected human or ecological system to the hazards."

This post uses vulnerability in the engineering sense insurers price: damage to a building at a given intensity. The IPCC term also covers people's capacity to cope, which matters as much and is beyond this post.

You will often see hazard × exposure × vulnerability. That is common shorthand, not the IPCC's wording. The IPCC's word, interactions, is more careful: the terms can move each other.

## one table, three perils

| term | what it is, and what changes it | flood | wildfire | hurricane |
|---|---|---|---|---|
| Hazard at the site | The force that arrives here. Shaped by floodplain, wetland, reef, forest fuel and gray works such as levees; for wind, in our reading, little on the land | Depth and speed of water at the wall | Embers, flame length and heat at the lot line | Wind at the roof; surge and waves at the shore |
| Exposure | What is in the way, and its value. Changed by siting, zoning, relocation, buyouts | Homes, a substation, a road in the floodplain | Homes at the forest edge, and the people in them | Buildings, ports and people on the coast |
| Vulnerability | How badly it is damaged. Changed by codes, retrofits, hardening | Floor height, flood-resistant materials, raised utilities | Class A roof, ember-resistant vents, a clear five feet | Roof-to-wall connections, opening protection |

The storm still forms and the fire still starts. The land changes how hard it arrives.

## which work moves which term

**Vulnerability is where property mitigation lives.** Codes, retrofits and hardening change how a building responds, one building at a time. It is measured and priced: the National Flood Insurance Program (NFIP), for one, rates each property on factors that include "Building characteristics, such as First Floor Height and the cost to rebuild." If your building can be hardened, harden it.

**Exposure is where managed retreat, zoning and siting live.** Moving what is in the way can end that loss, and it is the hardest on people; [managed retreat leaves land behind](/guide/managed-retreat-leaves-land-behind?from=guide) takes it on. Being in the way is not yet a loss; see [exposure is not risk](/guide/exposure-is-not-risk?from=guide).

**Hazard at the site is where the living system works, beside the gray works.** Coral reefs reduce wave energy "by an average of 97%," a 2014 global analysis in *Nature Communications* found. Coastal wetlands "avoided $625 Million in direct flood damages during Hurricane Sandy," a 2017 study in *Scientific Reports* estimated. In forests, "across a wide range of sites, thin and prescribed burn treatments are most effective at reducing fire severity," a 2021 review in *Ecological Applications* found: severity in the stand, not homes saved.

The limits matter as much as the figures. A 2003 review of 169 studies found cases where wetlands raise floods, with support for flood control "confined largely to floodplain wetlands." None of the reef or marsh research above claims to lower wind speed at a building: wind is the structure's job. For hail and earthquake, we know of no land measure that does much; the roof and frame are the answer.

This term differs in who it serves. A strap helps one house. A floodplain that holds water can lower the depth at every door downstream at once, and no single owner holds it or gets a credit for it.

## how a catastrophe model holds the three

Insurers price with catastrophe models. A draft primer from the National Association of Insurance Commissioners (NAIC, December 2024) names four parts: "Hazard Module (also known as the local intensity calculation module or event footprint generation); Vulnerability Module; Exposure Module; and Financial Module."

Three of those are the three terms. The vulnerability module uses damage functions, "equations that compute the amount of expected damage for a given hazard intensity (such as wind speeds)." The financial module turns damage into money.

Structural mitigation enters through the vulnerability module: "When mitigation data elements such as roof-to-wall connections, type of opening protection, and pressure-treated garage doors are specified in the exposure data, most catastrophe models can reflect the impact of these elements through vulnerability curves." The primer's hurricane questionnaire lists shutters and upgraded opening protections among its **secondary modifiers**, without formally defining the term.

The living system, where a model carries it, sits mostly in the hazard module, in the ground an event crosses to reach each site. It is often held still between model versions; why is in [the model learns from a past that is leaving](/guide/the-model-learns-from-a-past-that-is-leaving?from=guide). The same gap in a corporate climate risk model, where the ground has no row, is in [the watershed isn't in the asset register](/guide/the-watershed-isnt-in-the-asset-register?from=guide).

An owner who adds straps has a data field to send. Nobody has one for the marsh.

## one street, three terms

Picture houses and a pump station on a river bend that floods often. Three ways to lower the same loss:

**Vulnerability.** Raise the station's electrical gear and each house's furnace and panel above the expected flood. Each building takes less damage. The water is as deep as it was.

**Exposure.** Buy out the lowest lots and move the station uphill. The loss for what moved goes away. What stays faces the same water, and the empty lots become floodplain someone has to keep.

**Hazard at the site.** Keep the floodplain upstream connected, with room for the river to spread into wet meadow and side channels before the bend. Where it works, the depth at every door can be lower at once. Up to a point: a big enough flood fills it, and the effect has to be shown for this river, not assumed.

Most streets need more than one, and different people pay for each today. How a change in any term reaches an expected-loss number is in [how an intervention lowers the loss](/guide/how-an-intervention-lowers-the-loss?from=guide).

:::johnson
**a roof strap changes the vulnerability. a marsh changes the hazard.**

Both can lower the loss. The strap is one owner's job and can be credited to that owner. The marsh works, within its limits, for every building behind it, and no single policy pays for its keeping.

[see your place's expected annual loss by peril →](/place?from=guide)
:::

## pick the term before you pick the project

1. **Name the loss and the peril.** A flooded ground floor, a burned roof, a substation out for a week.
2. **Find the term that drives it.** Deep water at a low building is hazard and vulnerability. A plant in the lowest spot in town is exposure.
3. **Match the work to the term.** Hardening for vulnerability, siting or retreat for exposure, the ground and gray works upstream for hazard.
4. **Ask who else it protects.** If the answer is the whole street or basin, it is hazard work, and no single policy will fund it.
5. **Look at the place.** [Place](/place?from=guide) reads a US place's Federal Emergency Management Agency (FEMA) expected annual loss by peril; [exposure](/exposure?from=guide) shows what is in the way.

Insurers, governments and infrastructure operators each control vulnerability or exposure for what they own, and depend on a hazard shaped partly by land beyond their fence. That is where [the loss started outside the property line](/guide/the-loss-started-outside-the-property-line?from=guide) begins.

## where ensurance fits

Owners, codes, insurer credits and grants fund the vulnerability term. Buyout programs pay for exposure. The ground that shapes the hazard at the site is shared, sits off the lot and is rarely paid for by the buildings it protects.

[**Ensurance**](/manual/ensurance?from=guide) is designed for that third term. A place is designed to hold an account, the ground it depends on to be named in a certificate, and proceeds from those who depend on it to go to the people keeping it. It is early in the build: most of this is designed, not yet operating at scale. We do not run catastrophe models, harden buildings or set premiums, and no ensurance account has lowered anyone's premium. The protocol groups this work under [Risk Resilience](/risk-resilience.ensurance?from=guide) and, for floods, [flood resilience](/flood-resilience.syndicate?from=guide). See [ensurance for insurers](/solutions/insurers?from=guide&topic=mitigation-and-adaptation) or [for infrastructure operators](/solutions/infrastructure-operators?from=guide&topic=mitigation-and-adaptation). The full peril-by-peril map is [every mitigation strategy has two halves](/guide/every-mitigation-strategy-has-two-halves?from=guide).

## frequently asked questions

### what is hazard exposure vulnerability?

The three parts of a loss: the force that arrives, what is in its way, and how badly that thing is damaged. Property mitigation mostly lowers vulnerability, retreat lowers exposure, and the land and gray works upstream shape the hazard at the site.

### is risk hazard times exposure times vulnerability?

Often, as shorthand. The IPCC's own wording is that risks "result from dynamic interactions" between hazard, exposure and vulnerability, which allows for the terms changing each other.

### can trees or nature lower a building's vulnerability?

Not reliably. Their main work is on the hazard. Near a house, trees can lower or raise wind loads depending on where they stand, and can fail in a storm, so they are not wind mitigation.

This post is general information, not insurance, engineering, legal or tax advice.

## sources

[IPCC, AR6 Synthesis Report, Annex I: Glossary (2023)](https://www.ipcc.ch/report/ar6/syr/downloads/report/IPCC_AR6_SYR_Annex-I.pdf) — Definitions of hazard, exposure, vulnerability and risk ("dynamic interactions")

[NAIC, Catastrophe Modeling Primer, exposure draft (December 2024)](https://content.naic.org/sites/default/files/inline-files/10_23_24%20Exposure%20Draft%20of%20Cat%20Modeling%20Primer.pdf) — The four modules, damage functions, mitigation reflected through vulnerability curves, and secondary modifiers in the hurricane questionnaire; a draft, not a final version

[FEMA, Understanding Risk Rating 2.0 fact sheet (July 2025)](https://agents.floodsmart.gov/sites/default/files/media/document/2025-08/fema-understanding-risk-rating-2.0-fact-sheet-2025.pdf) — Building characteristics, including First Floor Height and the cost to rebuild, among the NFIP rating factors

[Insurance Institute for Business & Home Safety (IBHS), Wildfire Prepared Home Technical Standard (December 2025)](https://wildfireprepared.org/wp-content/uploads/WFPH-Technical-Standard-12-25.pdf) — Class A roof covering, ember-resistant vents and the 0–5 foot noncombustible zone, the wildfire hardening examples in the table

[Ferrario et al., *Nature Communications* 5:3794 (2014)](https://www.nature.com/articles/ncomms4794) — Coral reefs reduce wave energy by an average of 97%

[Narayan et al., *Scientific Reports* 7 (2017)](https://www.nature.com/articles/s41598-017-09269-z) — Wetlands avoided $625 million in direct flood damages during Hurricane Sandy

[Bullock and Acreman, *Hydrology and Earth System Sciences* 7(3) (2003)](https://hess.copernicus.org/articles/7/358/2003/) — Wetlands can increase as well as reduce floods; support for flood control confined largely to floodplain wetlands

[Prichard et al., *Ecological Applications* 31(8) (2021)](https://escholarship.org/content/qt1w52p1dp/qt1w52p1dp.pdf) — Across a wide range of sites, thin and prescribed burn treatments most effective at reducing fire severity; a stand-level finding, not a measure of homes saved

[UF/IFAS summary of Ibrahim et al., *Journal of Wind Engineering and Industrial Aerodynamics* 265 (2025)](https://blogs.ifas.ufl.edu/gcrec/2025/08/07/friend-or-foe-are-trees-protecting-your-home-from-hurricanes-or-putting-it-in-peril-tree-journal-club-8/) — Trees can lower or raise wind loads on a model house depending on direction, and can fail in high winds

## the series

1. [mitigation means two different things](/guide/mitigation-means-two-different-things?from=guide) — **Read first:** In climate policy, mitigation cuts emissions and adaptation cuts the damage; in insurance, mitigation is the adaptation
2. [hazard, exposure, vulnerability](/guide/hazard-exposure-vulnerability?from=guide) — The three things a loss is made of, and which one each kind of mitigation moves
3. [what home hardening does, and where it stops](/guide/what-home-hardening-does-and-where-it-stops?from=guide) — A ready house keeps embers out; how many arrive is shaped by the land around it
4. [flood proofing raises the house. the floodplain lowers the water](/guide/flood-proofing-raises-the-house-the-floodplain-lowers-the-water?from=guide) — Elevation, dry and wet flood proofing change the damage; the depth that arrives is shaped upstream
5. [wind mitigation is the house's job. the surge is the coast's](/guide/wind-mitigation-is-the-houses-job?from=guide) — The roof and its connections hold the wind; reefs, mangroves and dunes work on the water
6. [managed retreat leaves land behind](/guide/managed-retreat-leaves-land-behind?from=guide) — A buyout moves the exposure; the land it leaves can become floodplain someone has to keep
7. [every mitigation strategy has two halves](/guide/every-mitigation-strategy-has-two-halves?from=guide) — Harden what you own, keep what you stand on: a peril-by-peril map