Why Changes in the Risk Profile Need a Governance Response
An insurer's risk profile is not fixed between annual assessments. It can change when the company buys a business, launches a product, shifts its underwriting appetite, or encounters a developing exposure that was not prominent in its prior analysis. Governance must ensure that a significant change reaches decision-makers while they can still influence it—not only after the change appears in a report or a loss.
Escalation is a decision process, not simply an act of forwarding information. The person receiving the issue must have authority to assess it, challenge assumptions, require further analysis, approve or reject the proposed action, or refer it to a higher authority. The appropriate route depends on the insurer's established decision rights, the nature of the change, and whether the decision is within delegated authority.
A useful first question is not merely, “Has the measured risk increased?” Ask instead: Could this change alter a meaningful decision about strategy, underwriting, controls, capital, or the insurer's ability to absorb adverse outcomes? A change that reduces one risk can still be material if it introduces a new dependency or makes another exposure more concentrated. Conversely, routine movement in a familiar exposure may be handled through normal monitoring if it remains within approved authority and does not change the underlying risk profile in a meaningful way.
How to Route a Material Change
Business leaders should identify changes in the activities they own and provide relevant information to the risk function. The risk function can challenge the assessment, consider impacts across risk categories, and advise on escalation. Actuarial specialists may assess assumptions or quantify potential outcomes. These contributions support a decision; they do not make the business owner, executive, or board's accountability disappear.
The route should be set by the insurer's governance arrangements. A business owner may resolve a change within delegated authority. A senior executive or risk committee may need to review a change that crosses functions, creates uncertainty, or requires a decision beyond that authority. The board should be engaged when the issue calls for board-level oversight or a decision reserved to it. These are general routing principles, not a universal committee structure: an insurer must follow its own decision rights.
Identify what is changing, when it will take effect, which activities and exposures are affected, and whether the change is proposed, approved, or already underway.
Consider the scale and uncertainty of the exposure, connections with existing risks, changes in controls, strategic significance, and the possible effect on the insurer's ability to meet its objectives.
Use established authority and escalation arrangements. If the change exceeds delegated authority or crosses a relevant decision boundary, refer it to the appropriate executive or committee, and to the board when required.
Escalate early enough to allow meaningful challenge. Where a decision is pending, consider proportionate interim safeguards, such as limiting new exposure or requiring additional review.
Check whether the approved action, conditions, or controls have changed the risk profile as expected. A decision to proceed does not end the need for monitoring.
Comparing the Change With the Existing Position
A simple comparison can help explain the size and direction of a change. If a risk indicator has a baseline value \(B\) and a proposed post-change value \(P\), the absolute change is \(P-B\). When \(B\) is positive, the relative change is \((P-B)/B\). These calculations describe movement in the chosen indicator; they do not, by themselves, determine materiality or identify who has authority to decide.
The comparison follows directly from the meaning of change: subtracting the starting value from the ending value gives the amount added or removed. Dividing that difference by the starting value expresses it relative to the original scale. For example, a change of 6 units is a 60% increase from a baseline of 10, but only a 6% increase from a baseline of 100. The arithmetic is informative, but governance judgment must also consider what the indicator omits, its uncertainty, and whether the proposed activity changes the nature or concentration of risk.
Worked Example: Acquiring a Regional Specialty Insurer
A hypothetical insurer is considering an acquisition. Its existing specialty portfolio has 4,800 active policies. The target would add 1,200 policies in a region where the buyer has little underwriting experience. A management planning estimate indicates that the combined portfolio would have a modeled annual claims measure of $18.0 million, compared with $14.0 million before the acquisition. The estimate is a hypothetical model output, not observed industry data.
Assumptions and method. Treat the policy counts and claims measures as planning estimates supplied for this scenario. No probability distribution, interest rate, or mortality assumption is used. Compare the before-and-after measures, then route the decision according to its strategic significance and the insurer's delegated authority.
Step 1: Calculate the change in policy count. The combined count would be \(4{,}800+1{,}200=6{,}000\) policies. The absolute increase is \(6{,}000-4{,}800=1{,}200\) policies. Relative to the original count, the increase is \(1{,}200/4{,}800=0.25\), or 25%.
Step 2: Calculate the change in the claims measure. The absolute increase is \($18.0\text{ million}-$14.0\text{ million}=$4.0\text{ million}\). Relative to the original measure, the increase is \($4.0/$14.0=0.285714\ldots\), or approximately 28.6%.
Step 3: Route the issue. The decision is not just a 25% increase in policy count. It adds business in a region where the buyer has little experience and involves an acquisition, so it may affect strategy, underwriting, and controls. The business sponsor should bring the proposal and its assumptions to the accountable executives and applicable risk decision-makers before the acquisition is committed. If the decision is reserved to the board or exceeds executive authority, it should be referred to the board.
Check. Adding 1,200 to 4,800 gives the stated 6,000 policies; subtracting $14.0 million from $18.0 million gives $4.0 million. The method avoids the common mistake of treating a numerical increase as the entire assessment: unfamiliarity and strategic consequences also matter.
Escalate Proposed Products Before Launch
A new product can create a risk profile that is not well represented by the insurer's existing experience. Relevant questions include whether pricing and contract terms rely on assumptions with limited support, whether operations can administer the product as designed, and whether the product creates a new interaction with existing exposures. A product review should reach decision-makers early enough that they can impose conditions, request further analysis, delay launch, or decline the proposal.
Worked Example: A New Long-Term Income Product
A hypothetical insurer is reviewing a new long-term income product. Its internal scenario analysis estimates a $8.0 million adverse-outcome measure under the current product mix. Under a proposed launch of the new product, the same measure is estimated at $14.0 million. The product team expects to issue 2,000 contracts in the first year. The scenario analysis is a management estimate created for this example.
Assumptions and method. Treat both dollar measures and the planned contract count as estimates on a consistent basis. No probability distribution, interest rate, or mortality assumption is specified or needed for this comparison. Calculate the change in the stated measure, then consider what governance review is needed before launch.
Step 1: Find the absolute change. \($14.0\text{ million}-$8.0\text{ million}=$6.0\text{ million}\).
Step 2: Express it relative to the baseline. \($6.0/$8.0=0.75\), so the measure is estimated to increase by 75% relative to the current mix.
Step 3: Identify the governance questions. The increase is a signal for review, not an automatic approval or rejection rule. The product owner should explain the assumptions behind the estimate, how the product will be priced and administered, and which controls will operate. The risk function and relevant technical specialists can challenge that work. Because the proposal introduces a new long-term product and a substantial change in the stated scenario measure, accountable executives or the designated risk decision-makers should review it before launch. Any decision outside their delegated authority should be escalated further.
Check. The increase is $6.0 million, and $6.0 million is three-quarters of the $8.0 million baseline. The method avoids the mistake of approving a product solely because projected first-year sales are limited; a small initial volume does not necessarily establish that long-term exposure or uncertainty is immaterial.
Emerging Exposures Can Require Escalation Without Loss History
An emerging exposure may become significant before it produces a claim. New technology, changing legal interpretations, novel dependencies, or shifts in the operating environment may make historical experience an incomplete guide. Waiting for losses can mean that the insurer first recognizes the issue after it has accumulated exposure or lost practical options for reducing it.
Escalation in these circumstances should be proportionate to the evidence. Decision-makers need to understand what is known, what remains uncertain, which business activities may be affected, and what actions can reduce or monitor exposure while knowledge develops. A lack of precise estimates is not a reason to suppress a concern; it is information about uncertainty that should be made clear.
Worked Example: An Emerging Technology Dependency
A hypothetical insurer relies on an external technology provider used by 300 of its commercial policyholders. A new review identifies that 90 of those policyholders have a common dependency on a particular service. The insurer has not yet observed a related claim. Its internal scenario planning estimates that an outage affecting this shared dependency could create $3.6 million of gross claims across the insurer's portfolio, compared with $1.2 million in its prior planning estimate.
Assumptions and method. Treat the policyholder counts as a current inventory and the dollar amounts as hypothetical scenario estimates. No probability distribution, interest rate, or mortality assumption is used. Compare the estimates and use the concentration finding to inform escalation; do not treat the scenario estimate as a forecast or a measured loss.
Step 1: Calculate the concentration identified. \(90/300=0.30\), so 30% of the identified policyholders share the dependency.
Step 2: Compare scenario estimates. The estimated increase is \($3.6\text{ million}-$1.2\text{ million}=$2.4\text{ million}\). The ratio of the new estimate to the prior estimate is \($3.6/$1.2=3\), so the new estimate is three times the prior one, equivalent to a 200% increase.
Step 3: Choose a timely route. The business owner should notify the responsible executives and risk function promptly. They can assess whether the shared dependency affects other activities, whether existing controls remain adequate, and whether temporary exposure limits or monitoring are appropriate. The matter should go to a committee or the board if the required decision is beyond delegated authority or warrants that level of oversight.
Check. Ninety divided by 300 is 30%, and the change from $1.2 million to $3.6 million is $2.4 million. The method avoids the common mistake of waiting for a claim before escalating a concentrated, uncertain exposure.
Common Escalation Traps
- Waiting for certainty. An emerging risk can warrant review while estimates remain uncertain. Escalate the uncertainty and explain what evidence is available rather than presenting an uncertain estimate as a fact.
- Using one numerical indicator as a complete test. A percentage change can help describe scale, but it cannot capture strategic importance, concentration, control weaknesses, or the novelty of an exposure.
- Sending every issue to the board. Escalation should follow decision rights. Routine matters within delegated authority should not be confused with issues reserved for senior executives or the board.
- Escalating only after approval. If review occurs after an acquisition or launch is effectively irreversible, the decision-maker may have no meaningful opportunity to challenge or change the proposal.
- Assuming that approval ends accountability. The owner remains responsible for implementation and monitoring, while the appropriate governing body retains its oversight role.
A sound escalation arrangement connects a change to a decision while options remain open. It gives decision-makers a clear account of what is changing, why it may matter, what is uncertain, and which action or authority is being requested. This supports the ORSA's decision-support purpose and is aligned with the CAS Exam 9 (Risk Management for Actuaries) syllabus.
Check Your Understanding
For each case, identify the key change and the appropriate governance response. The figures are hypothetical.
- A proposed portfolio transfer would add 500 policies to an existing book of 2,500. The management estimate of a relevant exposure indicator changes from $10 million to $12 million. Calculate the absolute and relative changes, then state why the calculation alone cannot determine the escalation route. (Answer: 500 additional policies, a 20% policy-count increase; the indicator rises by $2 million, or 20%; routing also depends on authority, uncertainty, controls, and strategic significance.)
- A product proposal is estimated to increase a scenario measure from $5 million to $8 million. Calculate the increase and identify when the product decision should be escalated. (Answer: $3 million, or 60%; escalate to the accountable decision-makers before launch if the proposal warrants review or exceeds delegated authority.)
- An insurer finds that 24 of 80 insured businesses rely on the same newly identified service. No related claims have been reported. Calculate the share and give one reason escalation may still be appropriate. (Answer: 30%; a shared dependency may create concentration or uncertainty before any claim occurs.)
- An acquisition sponsor reports a projected increase in a risk measure from $16 million to $20 million, but says the board need not know because the estimate is “only a model.” Calculate the change and explain the governance issue. (Answer: $4 million, or 25%; a modeled estimate can still be relevant, and the matter should be routed according to its strategic significance and established decision rights.)
- A new exposure is difficult to quantify, but it may affect several business areas and current controls have not been assessed for it. State a suitable initial response without treating uncertainty as proof of a loss. (Answer: promptly notify the accountable executives and risk function, explain the uncertainty and affected activities, assess controls, and consider proportionate interim safeguards.)