September 2026
For a large enterprise, an employment claim is a bad quarter. For a 60-person company, it can be the end of the story.
That asymmetry is the defining fact of small business risk. Small and mid-size businesses carry the same legal exposure as the Fortune 500, the same discrimination statutes, the same harassment standards, the same retaliation liability with none of the insulation. No in-house counsel. No employee relations team. No layer of management redundancy to catch a problem before it becomes a charge. When something goes wrong inside a small business, it goes wrong fast, and it goes wrong at a scale the business often cannot absorb.
Which is exactly why small businesses partner with PEOs. Not for payroll convenience, but for protection. The PEO is, functionally, the small business’s entire risk infrastructure.
And that raises an uncomfortable question for our industry: how good is that protection, really?
Most PEOs can tell a client, at any moment, exactly who has completed their required training. Assignment rates, completion rates, certificates on file. The dashboard is green.
But consider what happens when a claim actually arrives. The EEOC recorded more than 88,000 new discrimination charges in fiscal year 2024, and recovered roughly $700 million for workers, much of it from employers whose training programs were fully in place. The training was assigned. The courses were completed. The dashboard was green. The behavior didn’t change.
This is the gap the compliance industry rarely says out loud: completion is not protection. A completion record proves an employee clicked through a course. It says nothing about whether a supervisor will actually intervene when they overhear something on the floor, whether an employee believes reporting is safe, or whether a new manager knows what to do in the thirty seconds when a situation is still recoverable.
For a small business, that gap is existential. They don’t have the margin to find out the hard way.
Here is a simple test. Ask any small business owner or, honestly, ask ourselves on their behalf: Which team in your company carries the most behavioral risk right now? Which role? Which location?
Almost no one can answer. Not because the risk isn’t there, but because nothing in the standard compliance stack is designed to see it. We measure participation. Risk doesn’t live in participation. It lives in three things:
Knowledge: Do people actually know what to do in a hard moment?
Attitude: Do they believe it matters, and believe the organization means it?
Behavioral Intent: What do they say they would actually do under pressure?
These three dimensions are what predict real-world behavior. When they’re measured before and after development, across teams, roles, and levels, risk stops being an abstraction and becomes a map. One large international organization recently measured all three dimensions across more than 7,700 employees before and after a targeted development program and documented improvement on every one. Behavior, it turns out, is measurable. Most organizations simply have never measured it.
Moving a client from “we don’t know where our risk is” to “we know exactly where it’s concentrated, and here’s what we’re doing about it” — from unknown to known — is one of the most valuable things any advisor can do for a small business. And PEOs are uniquely positioned to do it at scale.
This is not just a client-protection argument. It’s a growth argument.
Every PEO reading this knows the commoditization problem. From the prospect’s chair, payroll is payroll and benefits are benefits. Deals are won on price and lost on price, and the renewal conversation is a rate negotiation.
Now imagine a different conversation. A PEO sits down with a 75-person prospect and says: “Your current provider can tell you who finished the harassment course. We can show you where behavioral risk is actually concentrated in your workforce by team, by role, by level and then show you, twelve months from now, that it moved.” That is not a training upsell. It is a fundamentally different category of service, and no one else in the room is offering it.
It changes the renewal conversation, too. Administrative services are switchable; a working risk-intelligence loop is not. A PEO that diagnoses where risk lives, targets development where it’s actually needed, re-measures to confirm the shift, and sustains it over time becomes embedded in the client’s risk posture rather than their back office. The annual review stops being about fees and becomes: here is what changed in your workforce this year. Small business owners do not walk away from that.
And when a client does face a charge, the question that matters is never whether training was assigned. It’s whether the employer genuinely worked to identify and reduce risk. A PEO that can produce before-and-after behavioral evidence gives its clients something a completion report never can: a credible account of diligence.
Small businesses came to our industry for protection. The PEOs that thrive in the next decade will be the ones that deliver it at a deeper level, not more training, but a system that finds hidden risk, remediates the behavior underneath it, and proves the change.
The place to start is one question, asked of every client in the portfolio: Do we actually know where your risk lives?
Right now, almost nobody does. The PEOs that can answer it will not have to sell against anyone.
SHARE