Glossary

Downside risk

In the context of value-based care contracts, downside risk refers to financial liability a provider takes on when their patient population's total cost of care exceeds a pre-set benchmark. Unlike upside-only arrangements where the provider can earn bonuses but faces no penalties, downside risk arrangements require the provider to repay a portion of the excess cost to the payer. The amount at risk is defined in the contract and may range from partial to full risk depending on the model.

Reviewed by Stanislav Sukhinin, CFALast reviewed April 10, 2026

Why this matters for your clinic

Accepting downside risk without adequate data infrastructure is one of the most financially dangerous decisions an independent clinic can make. If you do not know your cost per attributed patient, you cannot forecast whether you are at risk of exceeding your benchmark. The penalty for missing the target can be real cash that you owe the payer at settlement, not just a reduction in a bonus.

Downside risk also affects your balance sheet and working capital planning. A practice with $400K in potential downside exposure under an active risk contract needs to carry sufficient reserves or credit availability to cover the worst-case settlement. Most small and mid-sized practices do not build this into their financial model, which creates the potential for a cash crisis at contract settlement.

CMS distinguishes between one-sided risk (upside only) and two-sided risk (upside and downside) in its APM program design. Under MACRA, only Advanced APMs with sufficient two-sided risk qualify for APM incentive payments, which is why many ACOs and risk models have minimum downside exposure requirements built into their program rules.

What good looks like

CMS publishes the risk corridor structure and downside exposure percentages for each CMMI model on the CMS Innovation Center website. Commercial payer downside risk structures vary by contract and are governed by the specific agreement language. NAACOS (National Association of ACOs) publishes resources on risk contract management.

Example

A primary care practice enters an ACO REACH global risk arrangement covering 2,200 Medicare beneficiaries. The benchmark total cost of care is $8.8M per year. The contract caps downside exposure at 5% of the benchmark: $440,000. In the first performance year, the practice's attributed population has higher-than-expected hospitalization costs, pushing total cost of care to $9.5M, $700K over benchmark. After adjustment factors, the practice owes $350,000 at settlement. Without reserves earmarked for this contingency, meeting that obligation is a severe cash flow event.

From Sorso

We advise clients not to accept two-sided risk until they have completed at least two full FFS years with clean per-patient cost data. The first year's data tells you your baseline. The second year tells you whether your cost trend is under control. Without both, you are pricing your downside on assumptions.

SS
Stanislav Sukhinin, CFA

Founder of Sorso. 19 years in corporate finance. Managed a $450M loan portfolio before building a fractional CFO firm exclusively for healthcare clinics.

Want to see how your practice measures up?

Take the 4-minute financial assessment. It is free, and it will show you where your practice is leaking money.