Why Risk Accountability Matters in Strategic Choices
Strategic proposals often cross business-unit boundaries. A product launch may rely on a shared technology platform; an outsourcing arrangement may transfer operational work while leaving the insurer accountable to policyholders; an investment choice may affect several portfolios at once. In these cases, unclear accountability can leave important risks unowned, or allow a proposal to proceed without an authorized decision.
Accountability is not the same as performing every analysis or managing every task. A sound governance arrangement identifies who owns the proposal and its outcomes, who provides independent challenge, who has authority to approve it, and when the decision must be escalated. Those roles should be clear before a proposal is treated as approved.
Four Roles in a Risk-Informed Strategic Decision
The business sponsor is normally accountable for bringing forward a complete proposal and for its business outcomes. The sponsor should identify the objective, affected units, material assumptions, expected benefits, significant risks, and actions needed to manage them. A sponsor cannot transfer this accountability to the risk function merely by requesting a risk assessment.
Risk specialists provide independent analysis and challenge. Depending on the proposal, they may examine risk appetite, concentrations, controls, scenarios, dependencies, and uncertainty. Their work informs the decision; it does not normally make them the business owner or the approver. A risk specialist should make material concerns visible, including disagreement with the sponsor’s assessment, and follow the organization’s escalation process if a concern remains unresolved.
Executives make decisions within their delegated authority. They consider the business case and challenge, ensure that the proposal has an owner and suitable controls, and determine whether conditions or further review are needed. Their authority is bounded by the organization’s governance rules: an executive cannot approve an exception that has been reserved to a higher body.
The board oversees strategy, risk governance, and the organization’s risk appetite. It may approve matters specifically reserved to it, such as a defined class of major transaction or an exception requiring board approval. It should not be treated as the routine owner of every proposal or as a substitute for management’s due diligence. The exact division of authority depends on the organization’s formally adopted delegations and policies.
| Role | Core contribution | Boundary to keep clear |
|---|---|---|
| Business sponsor | Develops the case, coordinates affected units, and owns delivery and outcomes. | Cannot approve beyond delegated authority or conceal unresolved concerns. |
| Risk specialist | Provides independent assessment, challenge, and advice on risk implications. | Does not become the business owner merely by assessing risk. |
| Executive approver | Decides within delegated authority and sets conditions or escalates as needed. | Cannot authorize a reserved matter or an exception outside the delegation. |
| Board | Oversees strategy and risk governance; decides matters reserved to it. | Does not replace management’s responsibility for analysis and execution. |
A Practical Test for Decision Rights
The appropriate decision-maker is not necessarily the person with the most technical knowledge or the unit expected to receive the largest benefit. Start with the organization’s delegation rules, then establish whether the proposal is within the relevant financial, strategic, and risk boundaries. A cross-unit proposal also needs a clearly identified sponsor and an agreed way to resolve disagreement between affected units.
A useful principle is to place a decision at the lowest level that has both the authority and the information to decide it, provided the proposal stays within approved boundaries. If either condition fails, the decision should move to a level that can address the shortfall. The logic is straightforward: delegated authority permits a decision only within its stated scope; an approval outside that scope is not made valid by good analysis or broad support.
This is a governance test, not a numerical risk model. The boundaries may include financial limits, risk appetite, required approvals, or conditions set by policy. If the proposal exceeds a boundary, the sponsor and executives should identify whether it can be redesigned to comply or must be referred to a higher authority. Referral does not itself grant approval.
Identify who owns the business case and which units must contribute information, controls, or resources. Agree who is accountable for delivery after approval.
Include direct and contingent commitments, dependencies, relevant exposures, and material assumptions. Do not assess a strategic choice using only one unit’s costs or benefits.
Ask the appropriate risk specialists to assess the proposal against applicable appetite, limits, and controls. Record material disagreement rather than treating silence as agreement.
Compare the complete proposal with formal delegations and reserved matters. Approve, reject, condition, redesign, or escalate as appropriate.
Specify who is responsible for implementation and ongoing oversight, including who will act if assumptions fail or agreed boundaries are approached.
Worked Applications
Worked Example: A Partnership With a Contingent Commitment
A hypothetical insurer is considering a technology partnership sponsored by its claims business. The sponsor expects a direct implementation commitment of $3.20 million and a minimum-volume guarantee of $0.90 million. Under the stated hypothetical governance policy, an executive committee may approve a total commitment of up to $5.00 million, but any proposal forecast to exceed a 12.0% counterparty exposure limit requires board approval or redesign. The risk specialist estimates exposure at 10.5% in the base case and 15.5% under the specified stress. Assume the policy’s stated exposure measure is the one to use, and that no other approval threshold applies.
Step 1: Identify the owner and contributors. The claims business sponsor owns the business case and delivery. Procurement, technology, and any other affected units should provide their assessments and implementation commitments. The risk specialist independently tests the counterparty exposure and challenges the assumptions.
Step 2: Calculate the total commitment. The guarantee is a contingent commitment but is included by the stated policy:
The $4.10 million commitment is below the executive committee’s $5.00 million authority threshold. It would be a mistake to stop the review here: financial authority is not the only applicable boundary.
Step 3: Test the exposure boundary. The base estimate, 10.5%, is below 12.0%, but the specified stress estimate, 15.5%, exceeds it by 3.5 percentage points:
Decision. The executive committee cannot approve the proposal as currently described if the policy requires board approval for a forecast breach under stress. The sponsor may redesign the guarantee or other terms and have risk specialists reassess the revised proposal. If the breach remains, the proposal must be referred for the required board decision. The sponsor remains accountable for the business case in either route.
Check. The commitment is $4.10 million, below $5.00 million, while stressed exposure exceeds the stated limit. The correct outcome is therefore not automatic executive approval; the risk-boundary rule still triggers redesign or escalation.
Worked Example: A Cross-Unit Proposal Above One Executive’s Delegation
A hypothetical insurer is considering a shared analytics platform for its underwriting and claims units. The underwriting executive sponsors the proposal. The company’s delegation permits that executive to approve commitments of no more than $2.00 million. The executive committee may approve commitments up to $3.00 million, if the proposal is within risk appetite. The forecast includes $1.35 million for implementation, a $0.55 million contractual contingency, and $0.30 million for required first-year integration. Assume all three amounts are committed costs under the delegation policy, and that the risk review finds no appetite breach.
Step 1: Combine costs relevant to the delegation. The sponsor must include the contingency and integration cost because the scenario states that each is a committed cost:
Step 2: Compare the total with the sponsor’s authority. The commitment exceeds the underwriting executive’s $2.00 million limit by $0.20 million:
The executive therefore cannot approve the proposal alone. The fact that the two units share the benefits does not reduce the total commitment or create additional authority.
Step 3: Identify the authorized route. At $2.20 million, the total is within the executive committee’s $3.00 million limit. Given the stated finding that the proposal remains within risk appetite, it may be submitted to that committee for decision. The risk specialist’s favorable assessment supports consideration but does not replace committee approval.
Decision and ownership. The underwriting executive remains the sponsor unless the organization formally assigns another sponsor. Both units should have defined delivery responsibilities, but one accountable sponsor should coordinate the business case and post-approval outcome. The committee decides; it does not take over day-to-day implementation.
Check. The correct amount for the threshold test is $2.20 million, not the $1.35 million implementation line alone. The proposal is above the sponsor’s delegation and below the committee’s stated limit.
Worked Example: A Strategic Transaction Crossing a Board Threshold
A hypothetical insurer is considering a strategic claims-services acquisition. Its eligible capital is $520 million. The governance policy requires board approval for a transaction whose exposure is at least 10% of eligible capital. For this question, assume the transaction exposure is $58 million, measured on the same basis and date as the $520 million capital figure, and no separate lower approval threshold applies. Executives can recommend the transaction but cannot approve a transaction meeting the board threshold.
Step 1: Calculate the threshold amount. Ten percent of eligible capital is:
Step 2: Compare the transaction exposure with the threshold. The transaction exceeds the threshold by $6 million:
Step 3: Check the ratio. Using exposure divided by eligible capital, the transaction represents:
Rounded to one decimal place for this comparison, the ratio is 11.2%, which is above 10.0%. The board threshold is therefore triggered.
Decision and roles. The business sponsor prepares the case and remains accountable for its completeness. Risk specialists independently assess relevant exposures and assumptions. Executives challenge the proposal and decide whether to recommend it, but the board is the authorized decision-maker under the stated policy. Board approval would not remove management’s responsibility for execution and ongoing risk management.
Check. Both tests give the same conclusion: $58 million is greater than $52 million, and 11.2% is greater than 10.0%. Executive recommendation is not executive approval.
Common Accountability Traps
A frequent error is to confuse analysis with ownership. A risk specialist may calculate an exposure carefully and recommend a control, but the sponsor still owns the business outcome and the authorized decision-maker still approves or rejects the proposal. Another error is to treat delegated authority as a budget line for only the sponsoring unit. Where policy requires aggregation, related costs and commitments must be combined before comparing the proposal with the limit.
A third trap is treating a favorable risk opinion as permission to proceed. Risk advice may identify that a proposal is within appetite, but approval still belongs to the person or body with decision authority. Conversely, a disagreement is not resolved by assigning the decision to the risk function; it should be documented and escalated according to the governance rules.
- Wrong: Compare only the $3.20 million direct cost in the partnership example with the $5.00 million authority limit and approve it because $3.20 million is lower.
- Correction: Include the $0.90 million guarantee, producing $4.10 million, and separately test the 15.5% stress exposure against the 12.0% limit. The exposure boundary still requires redesign or escalation.
- Wrong: Let the business unit with the largest expected benefit approve a cross-unit proposal automatically.
- Correction: Identify the formal sponsor and affected owners, aggregate commitments under policy, and obtain approval from the level holding the relevant authority.
Check Your Understanding
For each hypothetical scenario, identify the appropriate accountability or approval route using only the stated policy.
- A business sponsor proposes a shared service costing $1.10 million in setup fees and $0.70 million in unavoidable transition costs. The sponsor’s limit is $1.50 million; the executive committee’s limit is $2.00 million. Assume the proposal is within appetite. Who must approve it, and what total should be tested? (Answer: $1.80 million; the executive committee must approve because the total exceeds the sponsor’s $1.50 million delegation but is within its $2.00 million limit.)
- A risk specialist supports a product proposal as within appetite, but the sponsor’s assessment identifies an unresolved operational dependency. The executive has authority to approve ordinary proposals, and policy requires escalation of unresolved material concerns to the executive risk committee. Who owns the proposal, and what is the next step? (Answer: The business sponsor owns the proposal; document and escalate the unresolved concern to the executive risk committee before treating the proposal as approved.)
- A hypothetical acquisition has exposure of $44 million. Eligible capital is $400 million, and board approval is required at 10% or more of eligible capital. Calculate the ratio and identify the approval level. (Answer: $44 million ÷ $400 million = 11.0%; board approval is required.)
- A proposal has a $2.60 million direct commitment and a $0.50 million contractual guarantee. The executive limit is $3.00 million, but the stressed exposure is forecast at 13.0% against a 12.0% limit; policy requires board approval for a stressed limit breach. What are the total commitment and decision route? (Answer: $3.10 million; it exceeds the executive limit and breaches the stressed exposure limit, so it must be escalated for the required board decision or redesigned.)
- Two business units jointly benefit from a platform. One unit’s executive is designated sponsor, while a risk specialist performs the independent assessment. After approval, a service failure occurs. Which role’s work makes the risk specialist the accountable business owner? (Answer: None; the risk specialist’s assessment does not transfer business ownership, which remains with the designated sponsor and assigned management owners under the organization’s governance.)