Flood Risk Assessment: Why Your Flood Zone Isn’t Enough

A flood zone map tells you whether a property sits inside the area that has a 1 percent chance of flooding each year. It does not tell you how deep the water could get, how often smaller floods arrive, or what heavy rain pooling in the street could do. A senior FEMA official told Congress in 2020 that over 40 percent of recent flood insurance claims came from properties outside the mapped high-risk area or in places FEMA had not mapped. A flood risk assessment fills that gap.

What Is a Flood Risk Assessment?

A flood risk assessment estimates how deep floodwater could get at a site, how often, and what that water would cost. It combines three parts. The flood hazard describes where water goes and how deep it gets. Exposure describes what sits in its path, and vulnerability describes how badly each building is damaged at a given depth. Lenders use flood risk assessments on loan collateral, insurers on the properties they cover, investors on sites they buy, and companies on facilities they report on in climate disclosures.

Flood Zone vs Flood Risk Assessment: Why the Zone Is Not Enough

In the US, the usual starting point is a FEMA flood map. The map shows the Special Flood Hazard Area, the land with a 1 percent or greater chance of flooding in any year. It decides where flood insurance is required for federally backed mortgages and where local floodplain rules apply. A flood risk assessment answers the questions the map was not built to answer.

A Flood Zone Is a Regulatory Line That Gets Reviewed and Changed

FEMA flood maps are regulatory documents, so they go through public review before they take effect. Property owners and communities can appeal draft maps, and FEMA revises them where the technical evidence holds. After a map takes effect, an owner can still ask FEMA to take a building or lot out of the high-risk area if a survey shows it sits above the expected flood level.

The process keeps improving the map, and it also means the zone boundary is a legal line, adjusted property by property. A flood depth model reports the depth it computes from terrain, rainfall, and river and sea levels. The two answer different questions, so read them side by side.

A Flood Zone Describes One Flood

The high-risk zone is drawn for one event, the flood with a 1 percent chance each year. A property is either inside or outside that line. FEMA officials have said the zone shows just one flood hazard and is not a complete indicator of flood risk.

A flood risk assessment reports water depth for floods of different rarity, such as the 1-in-10, 1-in-100 and 1-in-500-year floods. Two buildings in the same zone can face very different depths. A building just outside the line can still take water in a rarer flood.

Flood risk assessment: river flood depth maps around one site at the 1-in-10, 1-in-50, 1-in-100 and 1-in-500-year floods
River flood depth around one riverside site at the 1-in-10, 1-in-50, 1-in-100 and 1-in-500-year floods (present-day baseline, about 90 m cells). The water stays in the channel next to the site, and the site’s own cell is dry in all four maps. Source: JRC global river flood hazard maps; Continuuiti.

Flood Maps Largely Leave Out Heavy Rainfall Flooding

FEMA’s maps focus on flooding from rivers and the coast. The Government Accountability Office (GAO) found in 2021 that FEMA’s flood risk products do not reflect hazards such as heavy rainfall, even though FEMA’s newer insurance pricing does.

Surface-water modelling shows where rain collects before it reaches a river: low points, streets that act as channels, and yards with no way out. A rain-on-grid model pours a set amount of rain over terrain and buildings and tracks where the water flows and pools. You can run one on sample sites with Continuuiti’s free pluvial flood simulator, and the platform runs the same solver at your own address. It treats all rain as runoff with no drains, so read its depths as an upper bound and use it to compare places and find where water collects.

Flood risk assessment: rain-on-grid simulation of a site in a heavy storm, with a grid of standing water depths beside it
Rain-on-grid screening simulation of one site in a 1-in-500-year storm. The 3D view shows where surface water collects, and the grid beside it gives standing water depth in metres around the site. Source: Continuuiti.

Flood Maps Show the Year They Were Made

The GAO describes flood maps as a snapshot of flood hazards at one moment. Maps age as land is built on, drainage changes and rivers move. As of 2020, maps for about 3,300 of 22,500 mapped US communities were over 15 years old, and less than 1 percent of mapped miles showed likely future conditions.

Check the effective date on your property’s map panel before relying on it. Keep the zone for what it does: insurance requirements, building rules and permits. Use a flood risk assessment to size the risk, and where the two disagree, find out why before acting on either one.

What a Flood Risk Assessment Measures

Flood sources. A full assessment looks at each way water can reach a site: rivers overtopping their banks, rain that cannot drain away, and coastal storm surge and sea level rise. Detailed studies also look at groundwater, sewer and reservoir flooding. See how river and surface-water flooding differ.

Flood depth at each return period. The core measure is water depth at the site for floods of different rarity. A 1-in-100-year flood has a 1 percent chance in any year, which adds up to about a 26 percent chance over a 30-year mortgage (see what a 100-year flood means). Flow speed and how long water stays also cause damage, and many screening datasets report depth only, so a good report says which it covers.

Exposure. This is the list of assets: exact location, ground height, height of the lowest floor, and value. Flood depth can go from dry to several metres over a short distance near a river, so flood work needs building-level coordinates.

Damage. Depth-damage curves give the share of a building’s value lost at each depth of water. FEMA’s Hazus curves cover US building types, and the European Commission’s Joint Research Centre publishes global curves. Adding up losses across return periods gives expected annual damage, which lets you compare a site that floods shallowly every few years with one that floods deeply once a century.

Flood risk assessment: HAZUS depth-damage curve showing building and content damage at different flood depths
HAZUS depth-damage curve showing how building and content damage percentages increase with flood depth during a flood risk assessment. Source: Continuuiti.

Climate scenarios and years. The IPCC finds that extreme daily rainfall gets about 7 percent heavier for each 1°C of warming. Global sea level is projected to rise about 0.18 to 0.23 metres by 2050 across the main scenarios, relative to 1995 to 2014, and local rise can be higher where land sinks. An assessment should name each climate scenario and year it uses.

FREE TOOL
Estimate Flood Damage to Any Building
Use real HAZUS and JRC depth-damage curves to calculate structural and content losses at any flood depth.

Try the Calculator

Types of Flood Risk Assessment

Portfolio screening covers many sites at once with global or national datasets. It ranks sites by flood depth, likelihood and estimated loss so a team can see which few need closer work.

Site-specific flood risk assessment looks at one property in detail. It may add a land survey, the measured height of the lowest floor, local drainage records and a hydraulic model of the nearby river or streets. Lenders, insurers and owners use it before a purchase, a large loan or a design decision.

Planning flood risk assessment in England. The National Planning Policy Framework, published in a new version in August 2026, requires one for development in the higher-risk flood zones and for larger or at-risk sites in the lowest zone. Councils also prepare strategic flood risk assessments for their local plans. The Environment Agency notes that its national flood maps do not show risk at the level of a single property.

How to Do a Flood Risk Assessment

  1. Define the decision. A purchase, a loan, an insurance renewal, a disclosure or an adaptation budget. The decision sets which flood sources, return periods, scenarios and years you need.
  2. Locate each asset precisely. Convert addresses to building-level coordinates and check the match quality. A town-level match is not good enough for flood.
  3. Record the flood zone. Note the FEMA zone and the map’s effective date, or the flood zone in England (what each zone means). This is the legal baseline.
  4. Get flood depth by source and return period. River, surface water and coastal. Record the dataset, its date and resolution, and whether the depth sits on the building or next to it.
  5. Add climate scenarios and years. Run at least two emissions scenarios for the years that match the decision.
  6. Check the observed record. Look for past floods near the site. If the record and the model disagree, that is a finding to explain.
  7. Convert depth to damage. Apply depth-damage curves using the building’s use, floor height and value. Report loss at each return period and expected annual damage.
  8. Decide the next step. Rank sites, read the flags and zeros, and choose a follow-up: a survey, a hydraulic study, an insurance review or adaptation work.

What Flood Risk Assessments Find That a Zone Lookup Misses

These come from flood risk assessments we have run. Sites are unnamed.

  • A depth at the pin can belong to the river next door. At the riverside site in the maps above, a global dataset reported more than 10 metres of water at the 1-in-10-year flood. The site’s own cell was dry at every return period. The deep water was in the channel about 90 metres away, so check whether a depth sits on the building or beside it.
  • The ground height you choose can flip the result. At the same riverbank, three public terrain models put the ground about 8 metres apart. Read against the highest, the site stayed dry at every return period; read against the lowest, it sat under water at every one. A report should name its terrain model and state its vertical uncertainty.
  • Floods do not always need extreme rain. One urban site had 111 recorded flood episodes within 10 kilometres between 2010 and early 2026. The median rainfall on those flood days was about 22 mm. A model that treats only extreme rainfall as a flood trigger would miss many of these floods, and the observed record caught them.
  • A zero needs a check. A global coastal flood dataset returned zero depth across a city on the coast. We checked another location on the same sea and got depths above 1 metre, which confirmed the zero was the dataset’s own answer and not a failed query. A clean zero is a finding once a control like this has been run.

What a Flood Risk Assessment Report Includes

  • Assets and locations: coordinates, match quality and the building details used
  • Flood zone: the zone and the map’s effective date
  • Flood depth table: depth by source, return period, scenario and year
  • Data sources: dataset names, dates, resolution and the terrain model
  • Observed floods: past floods near the site
  • Damage estimates: loss per return period and expected annual damage, with the assumptions
  • Limits and flags: what the models leave out, such as drains, flow speed or flood defences
  • Recommendations: which sites need a survey, a hydraulic study, an insurance review or adaptation work

How Much Does a Flood Risk Assessment Cost?

There is no standard published price, so the cost of a flood risk assessment depends on how deep it goes. Three levels cover most needs.

  • Flood zone lookup: free. FEMA’s Flood Map Service Center and England’s long term flood risk service show the official zone or risk band.
  • Screening assessment: low cost per site. Continuuiti returns river and coastal flood depth at four return periods for many sites at once in minutes, and surface-water depth from a rain-on-grid simulation for a single site. It costs far less than a site study and shows which sites need one.
  • Engineering-grade study: the most expensive. It adds a hydraulic model of the river or streets, a land survey and measured floor levels, and can test how well adaptation measures would work.

We advise checking the flood zone and running a screening assessment first, then commissioning an engineering study, such as a model-based property risk assessment, for the sites where the screening shows real exposure. At every level, cost rises with the number of sites, the flood sources in scope, new modelling, survey work and the climate scenarios you need.

In the US, FEMA charges no fee to review a request to take a property out of the high-risk zone, though the owner usually pays a surveyor for the elevation data.

Frequently Asked Questions

I am not in a flood zone. Should I still do a flood risk assessment?

Yes, if the property matters to you or your lender. A flood zone is a regulatory line that is appealed and changed, and it describes one river or coastal flood, so it can miss heavy rainfall flooding and rarer, deeper floods. A flood risk assessment adds depth at several return periods, rainfall flooding and future climate.

Can I change my flood zone?

Yes, in the US. If a survey shows your building or land sits above the expected flood level, you can ask FEMA to remove it from the high-risk zone. FEMA says this usually takes 30 to 60 days and charges no review fee.

Does a flood risk assessment take into account drainage and walls I have built?

A site-specific flood risk assessment can, because it models local drains, soil infiltration and walls or banks that turn water away. A screening assessment usually leaves them out on purpose. Continuuiti’s surface-water model treats all rain as runoff with no drains, so it shows the worst-case water depth at the site for each rainfall level. That worst case is what adaptation measures should be designed against, and a site study can then test how much your drains and walls reduce it.

Conclusion

A flood zone is the legal starting point for any property, and it describes one flood on the date the map was made. A flood risk assessment adds depth at several return periods, heavy rainfall flooding, future climate and likely damage. Use both, look at where they disagree, and let the decision you face set how detailed the flood risk assessment needs to be.

Govind Balachandran
Govind Balachandran

Govind Balachandran is the founder of Continuuiti. He writes extensively on climate risk and operational risk intelligence for enterprises. Previously, he has worked for 7+ years in enterprise risk management, building and deploying third-party risk management and due diligence solutions across 100+ enterprises.