Construction risk management: the top risks 48 construction companies disclose
Good construction risk management starts with knowing which risks your peers actually face. Construction risk is usually discussed project by project. Annual reports show the company-level picture: what contractors and homebuilders tell investors could hurt the whole business. We counted how many of 48 US-listed construction companies disclose each risk and compared the result with fourteen other industries.
Construction companies most often disclose intense competition (92%), cyberattacks (81%) and acquisitions (79%). The risks that set construction apart are surety bonding, subcontractor failure, site accidents, construction defects, backlog cancellations and project overruns.
- General insurance inadequate, unavailable or costly: 71% (39% on average in the other fourteen industries).
- Inability to obtain surety bonds or guarantees: 62% (0% elsewhere).
- Subcontractor or partner non-performance: 62% (3% elsewhere).
- Serious workplace accidents causing injury or death: 56% (2% elsewhere).
- Construction defect and warranty claims (46% vs 0%) and backlog and order cancellations (42% vs 2%).
Turn this list into your own risk registerRisk Samurai starts you with the risks typical for construction companies, then helps you score them, assign owners and track actions.
Get early accessHow we built this. We took the Risk Factors section of the latest annual report of 48 US-listed construction companies on SEC EDGAR (filed 13 November 2025 to 3 September 2026), recorded every disclosed risk and grouped equivalent risks across companies. “Share” is the percentage of construction companies whose filing discloses the risk. Disclosure is not likelihood: filings are written by lawyers, are over-inclusive and come from public companies that are mostly larger than a typical small business, and shares are approximate. Full method and caveats.
Who is in the sample
The benchmark covers 48 construction companies: all 48 filed a Form 10-K, with filing dates between 13 November 2025 and 3 September 2026. By SEC industry code (SIC), the group is made up of 15 homebuilders (operative builders) (1531), 12 special trade contractors (1700), 11 heavy construction contractors (1600), 6 water, sewer, pipeline and power line construction (1623) and 4 electrical contractors (1731).
In plain words, these are mostly large contractors and homebuilders: median annual revenue is about $2.5 billion, one of the highest medians in our study, with the smallest company at around $3.7 million and the largest around $34.3 billion. The median filing yields 54.5 distinct risks (range 25–119). Fifteen of the 48 companies are homebuilders, so housing market and land-use risks appear alongside the contracting risks that apply to the rest.
| Measure | Value |
|---|---|
| Companies | 48 |
| Annual reports | 48 × 10-K |
| Filing dates | 13 November 2025 – 3 September 2026 |
| Annual revenue | median $2.5 billion; smallest $3.7 million; largest $34.3 billion |
| Risks identified per filing | median 54.5 (range 25–119) |
| Company-level risks the filing explicitly calls new this year | 3% |
The top 30 risks construction companies disclose
The table ranks risks by the share of construction companies whose annual report discloses them. The last column is the average share across the other fourteen industries in our study, so you can see at a glance whether a risk is generic to listed companies or particular to this sector. Risks marked distinctive are disclosed by at least 20% of construction companies and by at least 15 percentage points more than in any other industry.
| # | Risk | Construction companies | Other industries (avg) |
|---|---|---|---|
| 1 | Intense competition eroding share and pricing Larger, lower-cost, private-label or new competitors undercut prices or outperform on products, causing loss of customers, market share and margins. | 92% | 68% |
| 2 | Cyberattack exposing data and disrupting operations Hacking, malware or ransomware against company systems exposes confidential or personal data and disrupts operations, causing liability, regulatory penalties, financial loss and reputational damage. | 81% | 85% |
| 3 | Acquisitions fail to integrate or deliver benefits Poor selection, valuation or integration of acquired businesses diverts management and disrupts operations, so expected synergies and returns are not realised and results suffer. | 79% | 73% |
| 4 | Adverse litigation and legal proceedings Lawsuits, claims and legal proceedings may produce adverse judgments, settlements and defence costs exceeding insurance, diverting management and harming reputation. | 73% | 63% |
| 5 | General insurance inadequate, unavailable or costly Insurance limits, exclusions, insurer disputes, rising premiums or unavailability leave property, catastrophe and liability losses uninsured and increase costs. | 71% | 39% |
| 6 | Inability to obtain surety bonds or guarantees distinctive Reduced surety capacity or tighter bonding and guarantee terms prevent bidding on or completing contracts, consume collateral and restrict debt capacity. | 62% | 0% |
| 7 | Adverse changes in tax laws and rates Changes in domestic or foreign tax laws, rates or interpretations increase effective tax rates and cash taxes, reducing earnings and cash flow. | 62% | 52% |
| 8 | Subcontractor or partner non-performance on projects distinctive Failure or underperformance of subcontractors, contractors or teaming partners may delay projects, breach prime contract obligations and cause penalties, extra costs and losses. | 62% | 3% |
| 9 | Loss of senior executives or key employees Unexpected departure of senior executives or key employees without ready replacements could disrupt operations, impair strategy execution and harm financial results. | 62% | 55% |
| 10 | Volatile quarterly results missing expectations Uneven order timing, fixed costs and other variable factors cause quarterly results to fluctuate and miss guidance, undermining forecasts and the share price. | 62% | 27% |
| 11 | Debt covenant restrictions and breach Restrictive covenants constrain operations, and a breach or cross-default allows lenders to accelerate debt, halt funding and enforce security over assets. | 60% | 40% |
| 12 | Serious workplace accidents causing injury or death distinctive Hazardous sites, machinery, materials or unsafe conditions cause serious accidents injuring or killing workers, leading to liability, penalties, project delays, uninsured losses and reputational damage. | 56% | 2% |
| 13 | Tariffs raising input and sourcing costs New or retaliatory tariffs and trade restrictions on imported goods, materials and equipment raise costs and constrain supply, compressing margins where costs cannot be passed on. | 56% | 30% |
| 14 | Pandemic disruption to operations and demand A pandemic or public health crisis and related restrictions could disrupt workforce, suppliers and customer demand, reducing revenue and straining liquidity. | 54% | 33% |
| 15 | Inability to raise additional capital Adverse market or company conditions prevent raising debt or equity on acceptable terms, forcing curtailed growth or operations, or dilutive and restrictive financing. | 52% | 48% |
| 16 | Economic downturn reducing customer demand Recession, inflation, tariffs or geopolitical shocks lead customers to cut or delay spending, reducing demand, volumes, prices and revenue. | 52% | 32% |
| 17 | Substantial indebtedness constraining cash flow High leverage, including further permitted borrowing, diverts cash flow to debt service and limits flexibility, increasing vulnerability to downturns and default. | 50% | 41% |
| 18 | Goodwill and intangible asset impairment Weaker performance, forecasts or market valuations reduce the fair value of goodwill and intangible assets, requiring non-cash impairment charges that reduce earnings and equity. | 50% | 33% |
| 19 | Fixed-price contract cost overruns Inaccurate cost or scope estimates on fixed-price contracts, or unapproved extra work, cause overruns and unrecovered costs, eroding margins or creating losses. | 46% | 4% |
| 20 | Construction defect and warranty claims distinctive Defective workmanship or materials in completed projects lead to defect and warranty claims, with repair costs exceeding reserves, indemnities or insurance. | 46% | 0% |
| 21 | Ineffective internal control over financial reporting Weak internal controls or unremediated material weaknesses may cause misstated or late financial reports and restatements, leading to sanctions and loss of investor confidence. | 44% | 54% |
| 22 | Internal IT system failure or outage Failure, defect or interruption of internal information systems could halt transaction processing and services, causing financial loss, data loss and reputational harm. | 44% | 44% |
| 23 | Evolving privacy laws raising compliance costs New, changing and inconsistent privacy laws across jurisdictions require costly changes to systems and practices, raising compliance costs and exposure to penalties. | 42% | 42% |
| 24 | Raw material and component shortages and price rises Shortages or price volatility in materials, components and hardware may delay production, construction or deployment, raising costs and reducing margins. | 42% | 7% |
| 25 | Backlog and order cancellations distinctive Customers cancelling, deferring or reducing orders and contracts without firm commitments prevent backlog converting into expected revenue and profit. | 42% | 2% |
| 26 | Loss of major customers Revenue concentrated in a few large customers means their loss, reduced orders, non-renewal or default could materially reduce revenue, profitability and cash flow. | 40% | 24% |
| 27 | Government contracting compliance and audits Breaches of procurement rules or adverse government audits may lead to cost disallowance, False Claims liability, termination and debarment. | 38% | 5% |
| 28 | Inaccurate accounting estimates and judgements Subjective management estimates and judgements may prove wrong, requiring adjustments or restatement that cause reported results to diverge materially from expectations. | 38% | 14% |
| 29 | Project delays and cost overruns distinctive Poor estimating, project management or site conditions cause delays and unrecoverable cost overruns on contracts, reducing margins and triggering penalties and claims. | 38% | 2% |
| 30 | Geopolitical conflict disrupting economy and markets Wars, terrorism and geopolitical tensions destabilise economies, energy prices, supply chains and financial markets, raising costs and reducing demand, asset values and results. | 38% | 20% |
The list blends two kinds of risk. Some are generic to listed companies — cyber, acquisitions, tax, executives, internal controls. Others are the core of construction: insurance, bonding, subcontractors, safety, tariffs on materials (56%), fixed-price overruns (46%), defects, material and component shortages (42%), backlog that fails to convert, project delays and overruns (38%) and revisions to contract estimates.
Insurance inadequacy ranks fifth, far above its average elsewhere. Contractors depend on liability, builder’s risk and workers’ compensation cover, and on the bonding capacity that surety providers extend. When cover becomes expensive or restricted, the business can bid on less work — which is why these are financial risks as much as operational ones.
Our data contains two very similar weather risks among the distinctive risks below: “adverse weather delaying construction projects” (35%) and “weather and disasters delaying construction projects” (31%). Treat them as one risk in your register. Note also that the “Project” risk group accounts for only 0.6% of mentions: in our classification, project-delivery risks such as cost overruns and estimate revisions are counted as financial or operational, so the group label understates how project-driven construction risk really is.
What is distinctive about construction companies
More than fifteen risks meet our test for being distinctive to construction: disclosed by at least 20% of construction companies and at least 15 percentage points more often than in any other industry. We list the fifteen most widely disclosed. Five areas apply to almost any contractor.
Inability to obtain surety bonds or guarantees
62% of construction companies disclose it, against 0% on average in the other industries.
Many public and large private contracts require performance and payment bonds. If the surety reduces your bonding line — after a loss-making year, weaker accounts or a market tightening — you simply cannot bid. Treat the surety as a key relationship: share accurate work-in-progress reports, keep capital and liquidity within the ratios they look at, and know how much headroom the current backlog leaves.
Subcontractor non-performance
62% of construction companies disclose it, against 3% on average in the other industries.
Much of the work on a typical project is subcontracted, so a subcontractor’s insolvency, poor workmanship or delay becomes your problem with the client. Prequalification (financial health, safety record, capacity), subcontractor default insurance or bonds for critical trades, and close monitoring of payment applications for signs of distress are the main controls. Avoid single points of failure in trades that are hard to replace mid-project.
Serious accidents and injuries on site
56% of construction companies disclose it, against 2% on average in the other industries.
Construction remains one of the most dangerous industries to work in, with falls, struck-by incidents and work near live services among the most common causes of serious harm. Beyond the human cost, a fatality brings regulatory investigation, work stoppages and reputational damage. Lead indicators — near-miss reporting, site inspections completed, high-risk work permits — are more useful than injury rates alone, which only tell you what has already happened.
Construction defect and warranty claims
46% of construction companies disclose it, against 0% on average in the other industries.
Defects can surface years after completion, and in some jurisdictions claims run for a decade. Homebuilders in particular carry long-tail exposure. Quality inspections at hold points, clear records of materials and approvals, back-to-back warranties from subcontractors and suppliers, and a realistic warranty reserve all limit the impact.
Project delays, overruns and backlog that fails to convert
“Project delays and cost overruns”: 38% (other industries 2%). “Backlog and order cancellations”: 42% (other industries 2%).
Poor estimating, site conditions and scope changes push projects late and over budget, while clients can defer or cancel work that sits in the backlog without firm commitments. Together they make reported backlog a weaker guide to future profit than it looks. Independent review of large bids, monthly cost-to-complete forecasts, early warning when a project’s margin slips, and a clear view of which backlog is contractually firm are the practical controls. Bidding work you cannot staff — skilled trades shortages appear among the distinctive risks below — is one of the fastest routes to an overrun.
The other distinctive construction risks in our list, including the duplicated weather risk and several that apply mainly to homebuilders and developers (housing downturn, environmental constraints on development, customer financing):
| Risk | Construction companies | Other industries (avg) |
|---|---|---|
| Adverse weather delaying construction projects Adverse or seasonal weather halts outdoor work and damages sites and homes, delaying completion, raising costs and causing revenue volatility. | 35% | 0% |
| Environmental constraints delaying development projects Environmental permits, species protections and site conditions may delay, restrict or prevent development projects, increasing costs and reducing returns. | 35% | 1% |
| Long-term contract estimate revisions Revisions to cost or progress estimates on over-time contracts may reverse recognised revenue and profit, causing charges and volatile earnings. | 35% | 1% |
| Housing market downturn reducing demand High mortgage rates, affordability pressure or weak confidence reduce home purchases, construction and remodelling, lowering demand, prices and transaction revenue. | 33% | 2% |
| Weather and disasters delaying construction projects Severe weather or natural disasters damage sites and projects under construction, halting work and delaying completions, increasing costs and reducing returns. | 31% | 0% |
| Unrecovered change orders and claims Customers disputing change orders or out-of-scope claims may leave project costs unrecovered, forcing write-offs and tying up working capital. | 29% | 0% |
| Multiemployer pension withdrawal liabilities Underfunded multiemployer pension plans require higher contributions or trigger withdrawal liabilities, causing significant unplanned cash outflows. | 29% | 1% |
| Skilled trades and production labour shortages Scarcity of skilled craft, trades and production workers may reduce capacity, delay projects and output, and erode margins. | 29% | 1% |
| Customer financing and insurance availability Higher interest rates, tighter lending or unaffordable insurance restrict customers' ability to finance purchases, reducing sales of homes, vehicles and projects. | 29% | 1% |
The category mix
Every identified company-level risk is classified into one of nine groups. The table shows how construction companies’ risk mentions split across them — a rough picture of where their attention goes, not of where losses come from.
| Risk group | Share of risk mentions |
|---|---|
| Financial | 26.1% |
| Strategic | 25.3% |
| Compliance and legal | 16% |
| Operational | 14.8% |
| ESG and sustainability | 6.8% |
| People | 5.6% |
| IT and cyber security | 3.6% |
| Reputational | 1.1% |
| Project | 0.6% |
Financial (26.1%) and strategic (25.3%) risks lead, followed by compliance and legal (16.0%) and operational (14.8%). ESG and sustainability accounts for 6.8% of mentions — second only to real estate among the fifteen industries — driven by weather, environmental regulation and site contamination. People risks (5.6%) are joint highest with professional services, reflecting safety and labour supply.
How to use this in your own risk register
A benchmark is a checklist of what peers disclose, not a risk assessment of your business. Use it to spot gaps, then do the real work yourself.
- Pick. Read the distinctive risks and the top ten first. Tick the ones that genuinely apply to your business model, size and markets, and drop the rest. Homebuilders should keep the housing market and land-use items; specialist contractors can usually drop them.
- Rewrite for your business. Filing wording is deliberately generic. Turn each risk into a specific statement of cause, event and consequence — see what a risk register is for the format.
- Score likelihood and impact. Score each risk on your own risk matrix. Do not use the share column as a likelihood: it measures how many companies mention a risk, not how often it happens.
- Name an owner and controls. Each risk needs one accountable person and a short list of the controls that actually reduce it today.
- Add indicators. Pick one or two key risk indicators for the risks that score highest, with thresholds that trigger action.
For example, “Subcontractor or partner non-performance on projects” becomes: “Insolvency of our mechanical and electrical subcontractor on a fixed-price hospital project delays completion by three months, triggering liquidated damages and replacement costs that exceed the project contingency.” That version identifies the trade, the contract type and the consequence, and points to controls such as prequalification and subcontractor default cover.
Indicators that suit construction companies include:
- Near-miss reports per 100,000 hours worked (a falling number can mean under-reporting).
- Projects forecasting a margin below bid by more than an agreed tolerance.
- Bonding capacity used as a percentage of the total line.
- Critical-trade subcontractors with a single approved supplier.
- Unapproved change orders older than 30 days, by value.
Because so much construction risk sits with subcontractors and suppliers, our third-party risk assessment guide is a useful companion; the tiering approach there works well for prequalifying subcontractors. For regulatory obligations such as health and safety, environmental and planning rules, see compliance risk management.
Frequently asked questions
What are the biggest risks in construction?
In 48 US construction annual reports, the most widely disclosed risks are intense competition (92% of companies), cyberattack (81%), acquisitions that fail to deliver (79%), litigation (73%) and inadequate or costly insurance (71%). Surety bonding and subcontractor non-performance follow at 62% each.
What are the most common construction project risks?
At company level, the filings point to subcontractor non-performance (62%), site accidents (56%), tariffs on materials (56%), construction defects (46%), fixed-price contract overruns (46%), material and component shortages (42%), backlog cancellations (42%), project delays and cost overruns (38%) and adverse weather (35%).
How should a small contractor use this list?
Keep the risks that apply to every contractor — safety, subcontractors, insurance and bonding, defects, cost overruns, labour and cash flow — and drop listed-company items. Rewrite each risk for your trades and contracts, score it on your risk matrix and give it an owner, then add project-level risks in a separate project register.
How was this list built?
From the Risk Factors section of the latest annual report of 48 US-listed construction companies on SEC EDGAR. We recorded every distinct risk each section discloses, grouped equivalent risks across companies and counted the share of companies disclosing each one.
Does a higher share mean a risk is more likely?
No. The share measures how many companies chose to disclose a risk, not how often it happens or how much it costs. Annual reports are written by lawyers to protect the company, so they are over-inclusive: a risk can appear in nearly every filing and still be unlikely in any given year. Score likelihood and impact for your own business separately.
Start your register from this benchmark
Risk Samurai uses this benchmark to suggest the risks companies in your industry typically face — bonding, subcontractor, safety, defect and project delivery risks for a contractor or homebuilder — when you build your register. You then rewrite, score and assign owners to them.
Get early access