Vulnerability, Exposure, and Disaster Risk Calculation

Disaster risk is the potential loss of life, injury or damage that a community may suffer, and it is commonly expressed as a function of hazard (how likely and how strong an event is), exposure (how many people and assets are in the hazard’s path) and vulnerability (how susceptible they are to harm), reduced by their capacity to cope. In brief: a widely used formula in geography is risk = (hazard × vulnerability) ÷ capacity to cope, and in engineering and insurance, expected loss = probability × exposed value × damage ratio. The same earthquake can be a minor event in a prepared country and a catastrophe in a poor, densely built one, because vulnerability and capacity differ.

Risk calculations allow governments, insurers and communities to compare places and decide where to invest in safety. This guide explains the components of risk, the factors that make people vulnerable, how to calculate risk with simple formulas, compares high-risk and low-risk situations in a table, works through examples, outlines the history of the concept and corrects common mistakes.

What are the components of risk?

If any of the first three is zero, the risk is zero: no hazard, no one exposed or no vulnerability means no disaster. Risk can therefore be lowered by reducing the hazard (for example, by flood storage upstream), reducing exposure (by planning), reducing vulnerability (by strengthening buildings) or raising capacity (through preparedness).

Three overlapping circles for hazard, exposure and vulnerability Disaster risk is where all three overlap Hazard Exposure Vulnerability Risk Capacity to cope and recover reduces the risk
Disaster risk arises where a hazard, people and assets that are exposed to it, and vulnerability all overlap. If any one of the three is absent the risk is zero, and greater capacity to cope and recover reduces the risk.

What makes people vulnerable?

Vulnerability is not just physical. Physical vulnerability concerns the location and quality of buildings. Economic vulnerability reflects poverty, dependence on a single livelihood and a lack of savings or insurance. Social vulnerability relates to age, disability, gender, language, access to health care and education, and social networks. Institutional and political vulnerability refers to weak governance, corruption and lack of planning and enforcement. Environmental vulnerability reflects degraded land, such as cleared slopes and wetlands that no longer buffer floods. Because of this, disasters strike the poor hardest: households often live on the most hazardous land because it is cheaper.

What models explain disaster risk?

The Pressure and Release (PAR) model, developed by Piers Blaikie and colleagues in 1994, says that disasters result from the meeting of a hazard with vulnerability that builds up in stages: root causes (such as unequal power and resources) lead to dynamic pressures (such as rapid urbanization and deforestation), which produce unsafe conditions (such as poor housing in dangerous places). The hazard “releases” the pressure. The Degg model places disasters at the intersection of hazard and vulnerability. Disaster risk indices, such as the World Risk Index and the INFORM Risk Index, combine indicators of hazard, exposure, vulnerability and coping capacity into one score to rank countries. Insurers use catastrophe models to calculate the average annual loss and the loss expected in rare events.

Contrasting cases compared

How the same hazard can lead to different outcomes
Factor Low-risk situation High-risk situation
HazardModerate earthquakeModerate earthquake
ExposureFew buildings in the zoneDense city on the fault
VulnerabilityEarthquake-resistant buildingsUnreinforced masonry, poverty
CapacityEarly warning, drills, insuranceWeak services, no insurance
OutcomeLimited damage and few deathsMajor losses and many deaths

Worked example: calculating risk

The numbers are hypothetical and illustrate typical calculations.

  1. Simple risk ratio: two cities face the same hazard, rated 8 on a scale of 1 to 10. City A has a vulnerability of 7 and a capacity of 2, so risk = (8 × 7) ÷ 2 = 28. City B has a vulnerability of 3 and a capacity of 6, so risk = (8 × 3) ÷ 6 = 4. City A has seven times the risk of City B.
  2. Expected annual loss: a flood with a probability of 2% (0.02) per year threatens 5,000 homes worth 150,000 each, with exposure of 5,000 × 150,000 = 750,000,000. If the damage ratio is 30%, the loss in the event is 750,000,000 × 0.30 = 225,000,000, and the expected annual loss is 0.02 × 225,000,000 = 4,500,000.
  3. Reducing vulnerability: raising the homes lowers the damage ratio to 10%. The loss in an event is 75,000,000, and the expected annual loss is 0.02 × 75,000,000 = 1,500,000. The saving is 3,000,000 per year.
  4. Cost-benefit: if raising the homes costs 25,000 each (125,000,000 in total) and the annual saving is 3,000,000, then it pays back after 125 ÷ 3 = about 42 years from average losses alone, though benefits in loss of life and in extra risk from climate change would shorten that.
  5. Death rate: an earthquake affects an area with 2,000,000 people. If 0.5% die in a low-capacity setting, deaths = 10,000. If strong buildings and drills cut this to 0.01%, deaths = 200, a reduction of 98%.
  6. Index score: a risk index combines hazard exposure (60), vulnerability (50) and lack of coping capacity (70) by the geometric mean: (60 × 50 × 70)1/3 = (210,000)1/3 = 59.4.

How did the concept develop?

Until the 1970s, disasters were seen mainly as natural events to be fought with technology. In 1976, Phil O’Keefe, Ken Westgate and Ben Wisner wrote a short paper called “Taking the naturalness out of natural disasters,” arguing that the social conditions, not nature alone, make hazards into disasters. Gilbert White and others had already stressed human choices. Blaikie and colleagues’ Pressure and Release model (1994) gave a framework, and the United Nations adopted the language of hazard, exposure and vulnerability in the Hyogo (2005) and Sendai (2015) frameworks, which call for risk reduction before disasters happen. Large datasets and models now allow risk to be mapped worldwide.

Which mistakes are common?

Mistake 1: Equating risk with hazard

A powerful hazard in an empty region carries little risk. Risk depends on exposure and vulnerability.

Mistake 2: Treating vulnerability as only weak buildings

Poverty, health, age, information and governance also matter, and may be more important for who is harmed most.

Mistake 3: Using the formulas as exact

Scores such as hazard 8 or vulnerability 7 are judgments. They help compare cases but depend on how the scales are set.

Mistake 4: Ignoring that risk changes

Growing cities, new construction and climate change change exposure and hazard, so risk must be reassessed regularly.