Why Delegated Authority Matters
An organization cannot send every operational choice to its board, but it also cannot assume that a senior manager may decide anything that appears routine. Delegated authority defines which decisions a role may make on behalf of the organization. Reserved decisions identify matters that remain with a specified executive, committee, or board. Clear boundaries support timely management while preserving appropriate oversight of significant risks.
The key question is not simply whether a decision-maker is experienced or whether a proposal seems sensible. The question is whether the governing documents and applicable constraints give that role authority to make that particular decision. A decision can be well-informed and beneficial yet still be made by the wrong authority.
A Practical Test for Decision Authority
Start by identifying the decision itself, not just the activity surrounding it. For example, a manager may have authority to administer an existing reinsurance arrangement but not to change the organization’s risk-retention strategy. The subject area may be the same, while the nature and significance of the decision differ.
A decision is within a role’s delegated authority only when the relevant governance documents grant that authority, the decision falls within its stated scope, and the decision does not breach an applicable constraint or reservation. These requirements work together; satisfying one does not compensate for failing another.
This is a governance test, not a formula for assigning dollar thresholds. The governing documents may include a board-approved policy, committee charter, executive mandate, or other formal authorization. The decision-maker should consult the documents that apply to the decision and confirm that they do not conflict with a higher-level reservation or a legal or regulatory requirement.
State what will change and what is merely implementation. Distinguish, for example, selecting a vendor under an approved arrangement from changing the organization’s outsourcing strategy.
Check the relevant mandate, charter, policy, or other formal delegation. Do not infer authority from seniority, custom, or technical expertise alone.
Determine whether the decision falls within the delegated subject matter and whether it is consistent with relevant policies and conditions.
Confirm whether the matter is retained for an executive, committee, or board. If authority is unclear or a constraint may be breached, the manager should not treat the decision as approved.
Who Makes the Decision, and Who Oversees It?
Governance accountability distinguishes directing and managing the business from overseeing whether it is governed appropriately. The board typically sets direction, approves important frameworks, and oversees management. Executives translate that direction into action and remain accountable for their responsibilities. Managers make decisions that have been delegated to them within the applicable framework.
A committee’s involvement does not automatically mean that it makes the underlying business decision. A risk committee may review a proposal, challenge its assumptions, or advise the board, while management remains responsible for the proposal and its implementation. Conversely, if the committee’s charter reserves a decision to it, management cannot substitute its own approval. The authority comes from the organization’s governance arrangements, not from the committee’s name.
| Role in a decision | Typical contribution | Authority question |
|---|---|---|
| Manager or risk owner | Develops and makes operational choices within assigned responsibility | Has this decision been delegated, and is it within the stated scope? |
| Executive | Directs management activity and may approve matters retained above line-management level | Does the executive mandate assign this decision to the executive? |
| Risk or other committee | May review, challenge, recommend, or decide matters assigned by its charter | Is the committee advising or overseeing, or does its charter reserve the decision to it? |
| Board | Sets direction and oversees matters retained at board level | Is this a board-reserved matter under the governance framework? |
Control functions have important but distinct roles. Risk management, compliance, and actuarial professionals may provide analysis, advice, or challenge. Internal audit may provide independent assurance. Those contributions can improve the basis for a decision, but they do not themselves transfer decision authority to the control or assurance function.
Worked Applications
Worked Example: A Routine Change Within an Approved Product
A hypothetical insurer has approved a small commercial product and its underwriting policy. The policy authorizes the regional underwriting manager to approve changes to renewal terms for individual accounts, provided the change stays within the approved product design and underwriting standards. A proposed renewal price adjustment is within those standards. The manager asks whether the decision should be made by the board risk committee because it affects the insurer’s risk.
Method. Apply the authority test to the particular decision rather than treating every risk-related choice as a board matter.
Step 1: Identify the decision. The decision is the renewal pricing adjustment for one account. It is not a proposal to launch a new product, change the underwriting policy, or alter the insurer’s overall risk strategy.
Step 2: Find the authority. The hypothetical policy expressly gives the regional underwriting manager authority over renewal-term changes of this kind.
Step 3: Check scope and constraints. The proposed adjustment is stated to remain within the approved product design and underwriting standards. No contrary constraint is identified.
Step 4: Check for a reservation. The facts identify no reservation of individual renewal pricing decisions to the committee or board. The committee’s general oversight of risk does not by itself make it the operational decision-maker.
Conclusion. The manager may make this decision under the described delegation. The manager remains responsible for acting within policy; oversight of underwriting risk remains a separate governance responsibility.
Common mistake avoided. Sending every decision that affects risk to the board or a risk committee confuses oversight with management. The correction is to identify the decision’s actual scope and check the authority assigned to the role.
Worked Example: A Purchase That Breaches a Policy Constraint
A hypothetical insurer’s procurement policy allows a business-unit executive to approve a technology contract costing up to $500,000. A proposed contract costs $420,000, so it is within that amount. However, the same policy prohibits the business unit from placing more than 30% of its critical data processing with one supplier without a separate approval. The contract would raise that supplier’s share from 25% to 35%. The executive argues that the contract is authorized because its price is below $500,000.
Method. Treat the monetary authority and the policy constraint as separate conditions. Authority requires both to be satisfied.
Step 1: Check the monetary condition. The contract costs $420,000, and $420,000 is less than the $500,000 delegation. Therefore, it passes the stated cost condition.
Step 2: Check the concentration condition. The supplier’s share would be 35%, which is greater than the permitted 30% without separate approval. The proposal therefore fails the policy constraint.
Step 3: Determine the effect. Passing the cost condition does not override the concentration restriction. On the facts given, the executive cannot approve the contract using the ordinary delegation. The proposal needs the separate approval required by policy before it may proceed.
Conclusion. The contract is not within the executive’s authority as presented, even though its price is below the monetary limit. The facts do not specify which body provides the separate approval, so that must be established from the policy rather than assumed.
Common mistake avoided. Incorrect reasoning: “$420,000 is less than $500,000, so the executive is authorized.” Correct reasoning: the cost condition passes, but the 35% concentration breaches the 30% constraint; therefore the ordinary delegation is insufficient.
Worked Example: Renewal of Reinsurance With a Material Change
A hypothetical insurer has a board-approved reinsurance framework. It permits the chief underwriting officer to renew a catastrophe program when the renewal remains consistent with the approved framework. A renewal proposal keeps the same reinsurers and broad contract structure but increases the insurer’s retained catastrophe exposure beyond the level assumed in the framework. The chief underwriting officer believes the change is commercially attractive and proposes to sign the renewal without further approval.
Method. Separate routine execution of an approved arrangement from a change that alters a material feature of the approved risk position.
Step 1: Identify what is changing. Although the contract is described as a renewal, the retained catastrophe exposure would increase beyond the level assumed in the board-approved framework. This is more than administrative continuation of the same arrangement.
Step 2: Read the delegation in context. The chief underwriting officer may renew only when the renewal remains consistent with the framework. The stated change does not meet that condition.
Step 3: Identify the limit of the conclusion. The facts establish that the officer cannot rely on the renewal delegation to make this change. They do not establish whether the next decision-maker is an executive, a committee, or the board. The governing framework and any relevant charter must identify the authority that is reserved.
Conclusion. The chief underwriting officer should not approve the proposal under the routine renewal delegation. The change requires a decision by the authority assigned to departures from the approved framework, before the organization commits to the revised retained exposure.
Common mistake avoided. Calling a transaction a “renewal” does not make it routine. Authority depends on the substance of the change and the conditions of the delegation, not the label attached to the transaction.
Why the Test Works and Where It Can Fail
The test follows from the purpose of delegation. An organization grants authority for defined decisions so that management can act without seeking approval for every operational matter. But the grant is bounded: a role cannot exercise authority outside the subject, conditions, or decision rights assigned to it. A reservation marks a decision the organization has chosen not to delegate. Therefore, every condition in the test is necessary: a grant without scope is insufficient, and a decision within scope is still not authorized if it breaches a constraint or is reserved elsewhere.
This reasoning also explains why consultation is not the same as approval. A manager may be required to consult the risk function, obtain actuarial analysis, or receive compliance advice. Unless the governing arrangement makes that advice or consent a condition of authority, consultation does not itself change who has the decision right. The manager must still consider required input and remain accountable for the decision.
When authority is uncertain, the appropriate response is not to infer permission from urgency, past practice, or apparent business benefit. The decision-maker should establish the applicable authority and whether the relevant conditions have been met before committing the organization. This protects accountability and makes it possible to distinguish a valid decision from a decision that needs approval elsewhere.
Common Governance Traps
- Assuming seniority creates authority. A senior manager may have broad responsibilities yet lack authority for a matter explicitly reserved to a committee or the board.
- Treating a committee’s oversight as operational approval. Reviewing and challenging a proposal does not mean the committee makes the decision unless its charter assigns that right.
- Confusing expertise with decision rights. A specialist can recommend or challenge a decision without owning the business choice.
- Checking only one condition. Being within a cost delegation, for example, does not establish authority if another policy constraint is breached.
- Relying on labels or precedent. A “renewal” may materially change risk, and a decision made informally in the past may not be authorized by current governance documents.
Check Your Understanding
For each situation, identify who may decide based on the stated facts and what condition or authority must be checked.
- A hypothetical claims manager may settle claims under an approved claims policy. A claim is within the manager’s stated settlement authority, but the policy requires legal review for a specified coverage dispute. May the manager settle immediately? (Answer: Not until the required legal review is completed; the stated authority is subject to that condition.)
- A business-unit executive is authorized to renew an existing service contract within approved operating parameters. The renewal changes a key service feature beyond those parameters, although the price is unchanged. Is it within the renewal delegation? (Answer: No; the change is outside the stated parameters, so the applicable higher approval must be identified.)
- A risk committee receives a proposal, questions its assumptions, and recommends that management proceed. The committee charter assigns the operational decision to management. Who makes the decision? (Answer: Management makes the decision; the committee’s review and recommendation do not transfer the assigned decision right.)
- A manager has authority to approve a vendor contract up to $200,000. A hypothetical $180,000 contract is within that limit, but a separate policy reserves contracts involving a particular sensitive data category for executive approval. Can the manager approve it alone? (Answer: No; the contract is under the cost limit but is subject to the separate executive reservation.)
- A chief actuary recommends changing an assumption used in a risk report. The reporting process assigns approval of material methodology changes to an executive committee, while the chief actuary is responsible for technical analysis. Who may approve the change, and what is the actuary’s role? (Answer: The executive committee approves the material change; the chief actuary provides the technical analysis and recommendation.)