Why the Same Risk Needs Different Reports
A risk report is useful when it helps its audience fulfil a responsibility. A board may need to determine whether a strategic choice remains within approved risk appetite or requires an exception. A business leader may need to decide which control to change, who will implement it, and by when. Giving both audiences the same undifferentiated list of metrics can leave the board without a clear oversight question and management without enough detail to act.
Tailoring does not mean changing the underlying facts to suit the reader. It means presenting a consistent risk issue at different levels: strategic context and decision implications for oversight; drivers, controls, owners, and actions for management. The appropriate division depends on the organization’s governance structure and delegated authorities.
Start With the Question and the Authority
Before selecting charts or metrics, identify what the recipient is expected and authorized to do. A board generally oversees strategy, risk appetite, and management performance; it may approve specified exceptions or major commitments. Business leaders generally act within delegated limits, manage controls, and escalate matters that exceed those limits. Actual authority must be confirmed from the organization’s governance documents rather than assumed from job title.
For each report item, ask four questions:
- Strategic context: Which objective, material exposure, appetite statement, or strategic choice does this issue affect?
- Decision authority: Is the recipient expected to decide, recommend, monitor, or escalate?
- Level of detail: What is the minimum information needed to perform that role, and what supporting detail belongs with management?
- Question to resolve: What specific conclusion or action should follow from the report?
These questions prevent two opposite errors. A board pack can become an operations log if it lists every control task. A management report can become too abstract if it says only that a risk is “elevated,” without identifying its drivers or next actions. A well-designed reporting chain links the detail to the summary so that a board-level issue can be traced to accountable management action when needed.
Translate Limits Into Decision-Ready Information
A limit is useful in a report only when the reader can see the current position relative to it. For a measure where larger values represent more risk, let \(L\) be the approved maximum and \(x\) the current value, both measured on the same basis. Define headroom as the limit less the current value:
This follows directly from the meaning of headroom: it is the amount that can be added before reaching the maximum. If the current value is \(x\), adding \(H\) brings the total to the limit, so \(x+H=L\). Rearranging gives \(H=L-x\). A positive value means the current position is below the limit; zero means it is at the limit; a negative value means it exceeds the limit. The formula is not appropriate without adjustment for a lower-bound limit or a metric where smaller values represent greater risk.
A concise board view can show the limit, current position, headroom or breach, direction of change, strategic consequence, and the decision or oversight requested. Management may need the breakdown that explains how the total arose and what actions can change it. The detail should support the decision, not obscure it.
Worked Example: Reporting a Strategic Concentration Limit
A hypothetical insurer has a board-approved maximum of $120 million for exposure in a coastal zone. Current exposure is $96 million. A proposed product launch would add $18 million in one coastal region and $12 million in another. The board must decide whether to authorize the launch as proposed or require a change. Management can adjust the regional launch plan. Design the board and management reports, including the limit calculation.
Method. First calculate current headroom, then calculate the proposed total and its position relative to the limit. Next identify what the board must decide and what management needs to change the proposal.
Current headroom is \(120-96=24\) million dollars. The proposed additions total \(18+12=30\) million dollars. Proposed exposure is \(96+30=126\) million dollars. Its headroom is \(120-126=-6\) million dollars, so the proposal exceeds the limit by $6 million.
Board view. Report the $120 million limit, $96 million current exposure, $126 million proposed exposure, and $6 million proposed breach. State that the decision is whether to approve the proposal only with a reduction or to defer it; do not bury the breach in regional detail.
Management view. Show the two proposed additions, $18 million and $12 million, and assign owners to produce a compliant plan. For example, reducing the combined additions by $6 million gives \(96+(30-6)=120\) million dollars, exactly at the limit. If the business intends to preserve headroom rather than use all of it, management must propose a larger reduction.
Check. The revised amount is $120 million, equal to the approved maximum, and the revised headroom is \(120-120=0\). The calculation is consistent. The common mistake is to report only the $24 million current headroom and overlook that the proposed additions total $30 million. Current headroom does not establish that a proposed decision fits within the limit.
Use Complementary Views, Not Competing Versions
A board summary and a management report should be different views of the same issue, not separate versions with conflicting definitions. A practical reporting chain starts with the material issue and the strategic consequence, then links to the management-level drivers and actions. The board can request additional detail, but the routine board view should not require directors to reconstruct the decision from an inventory of operational measures.
| Reporting dimension | Board emphasis | Business leader emphasis |
|---|---|---|
| Strategic context | Effect on objectives, appetite, and material commitments | How the exposure arises in the business plan or process |
| Authority | Reserved approval, appetite oversight, or exception decision | Delegated action, control ownership, and escalation trigger |
| Detail | Material position, trend, consequence, and requested decision | Drivers, indicator breakdown, control status, owner, and due date |
| Question | Is the exposure acceptable, and what oversight or approval is required? | What should change, who will do it, and when will completion be checked? |
A board-level indicator should normally be accompanied by a plain-language interpretation. “Amber” alone does not explain whether the risk is within appetite, worsening, or awaiting a decision. A management action should likewise be specific enough to monitor: an owner, a deliverable, and a due date are more useful than “continue to monitor.”
Worked Example: Converting a Control Issue Into Two Reports
A hypothetical claims operation has annual estimated leakage of $4.8 million, divided among three causes: duplicate payments of $2.1 million, incorrect benefit coding of $1.5 million, and late recovery of $1.2 million. A business leader is accountable for reducing leakage. A board committee receives material trend and appetite reporting but does not manage claims controls. Management estimates that planned actions could reduce the three causes by $0.6 million, $0.3 million, and $0.2 million, respectively. Prepare a concise view for each audience.
Method. Verify the aggregate, calculate the planned residual by cause, and tailor the requested response to each audience’s authority.
The aggregate is \(2.1+1.5+1.2=4.8\) million dollars. After the proposed reductions, duplicate-payment leakage is \(2.1-0.6=1.5\) million; coding leakage is \(1.5-0.3=1.2\) million; and late-recovery leakage is \(1.2-0.2=1.0\) million. The residual total is \(1.5+1.2+1.0=3.7\) million dollars. The planned reduction is \(0.6+0.3+0.2=1.1\) million, and \(4.8-1.1=3.7\), which checks the result.
Board view. Report the $4.8 million total, the projected $3.7 million after planned actions, and the $1.1 million expected reduction. Connect the trend to the relevant approved appetite or materiality threshold, if one applies, and state whether the committee is being asked to oversee a response or note progress. Do not imply a threshold breach when no threshold has been provided.
Management view. Show the three causes and reductions separately. Assign an owner and completion date to each control action, then monitor whether the realized result supports the planned reduction. This breakdown helps the business leader direct effort without asking the board to manage payment or coding procedures.
Check. The three residual amounts total $3.7 million and the total reduction is $1.1 million. The common mistake is to give the board only the cause-by-cause control inventory. That detail may be important for management, but without the aggregate, materiality context, and oversight question, it does not answer the board’s central question.
Make Escalation and Decision Rights Explicit
A report should distinguish a recommendation from a decision. It should also show when a matter is within delegated authority and when an escalation is required. This is especially important when the cost of an option, its risk implications, or both cross an approved boundary. Management can still analyze alternatives and make a recommendation, but the report should not imply that management has authority to approve a matter reserved to the board.
Worked Example: Separating Management Recommendation From Board Approval
A hypothetical insurer’s policy permits management to approve a service-modernization commitment of up to $25 million, provided the selected design has a recovery time of no more than 48 hours. A board committee must approve commitments above $25 million or exceptions to the recovery standard. Option A costs $22 million and has a 60-hour recovery time. Option B costs $26 million and has a 36-hour recovery time. Management prefers Option B. Identify the authority, compliance, and reporting implications.
Method. Test each option separately against the financial delegation and recovery standard; then identify the decision that remains for the committee.
Option A is within the $25 million cost delegation because \(22\leq25\), but its recovery time exceeds the 48-hour standard by \(60-48=12\) hours. It therefore requires an exception decision under the stated policy. Option B costs \(26-25=1\) million dollars above the management delegation, so committee approval is required. Its 36-hour recovery time is within the standard, with \(48-36=12\) hours of margin.
Board view. Present the two options, their costs and recovery times, the applicable delegation limits, and management’s recommendation. The committee’s decision is whether to approve the $26 million commitment. It should not be presented as a management-approved purchase.
Management view. Provide the analysis supporting the recommendation, the implementation owner, and the actions required if the committee approves. If Option A is retained as an alternative, clearly identify the recovery-standard exception it would require.
Check. Option B is within the recovery standard but outside management’s cost authority; Option A is within the cost delegation but outside the recovery standard. Neither can be described as fully approved under the stated policy. The common mistake is to treat compliance with one boundary as sufficient for approval. Both relevant tests must be shown.
Common Reporting Traps
- Reporting a metric without its decision context. A number or status color does not show what objective, appetite, or authority it relates to.
- Confusing oversight with operations. The board should be able to challenge management’s response without being assigned routine control tasks.
- Hiding the requested response. State whether the audience is being asked to approve, challenge, escalate, or monitor.
- Mixing current position and proposed position. Label them separately; current headroom does not prove a proposed choice is within a limit.
- Using the same detail for every reader. Preserve consistent definitions and facts, but provide different levels of breakdown to match decision needs.
- Ignoring delegated authority. A technically attractive option may still require escalation if approval is reserved to a higher authority.
For a professional risk report aligned with the CAS Exam 9 (Risk Management for Actuaries) syllabus, the central discipline is to connect a material risk to the right decision-maker and a clear question. A board-ready summary explains strategic significance and the decision or oversight required. A management-ready view makes the drivers and actions accountable. When both views use the same basis, reporting supports oversight without displacing management responsibility.
Check Your Understanding
For each situation, identify the audience emphasis and show the key calculation or authority conclusion.
- A hypothetical board limit for a business-line exposure is $90 million. Current exposure is $72 million, and a proposed expansion adds $23 million. Calculate current headroom and the proposed excess, then state the key board question. (Answer: Current headroom is \(90-72=\)$18 million; proposed exposure is \(72+23=\)$95 million, or $5 million over the limit. The board must decide whether the proposal should be reduced or an exception considered.)
- A business leader reports three annual control-loss estimates of $0.8 million, $1.1 million, and $0.6 million. Proposed actions are expected to reduce them by $0.2 million, $0.4 million, and $0.1 million. Calculate the total before and after action and identify which breakdown belongs in management reporting. (Answer: Total before action is \(0.8+1.1+0.6=\)$2.5 million; residuals are $0.6 million, $0.7 million, and $0.5 million, totaling $1.8 million. Management reporting should retain the cause-level breakdown, owners, and due dates.)
- A hypothetical policy delegates commitments up to $18 million to management if a service target of 24 hours is met. A $17 million option has a 20-hour recovery time; a $19 million option has a 16-hour recovery time. Which option requires higher approval, and what must the report make clear? (Answer: The $19 million option exceeds the delegation by \(19-18=\)$1 million and requires higher approval despite meeting the service target. The report must distinguish management’s recommendation from the approval decision.)
- A report shows a current position of $44 million against a $50 million maximum. A proposed change adds $9 million. Calculate current headroom and the proposed position, then explain why reporting only current headroom is inadequate. (Answer: Current headroom is \(50-44=\)$6 million; proposed position is \(44+9=\)$53 million, exceeding the maximum by $3 million. Current headroom alone omits the proposed change and could conceal the breach.)
- A board committee oversees an appetite threshold while a business leader controls the underlying process. The board pack lists ten individual control tasks but omits the aggregate position, threshold, and requested decision. State one appropriate board-level revision and one management-level detail to retain. (Answer: The board view should state the aggregate position relative to the threshold and specify the oversight or approval question; management should retain the task-level control actions with accountable owners and due dates.)