Building a Framework That Connects to Decisions
An ERM framework is useful when it helps an insurer make and revisit decisions, not merely when it produces a list of risks. For a working insurer, the framework should make clear what the organization is trying to protect and achieve, which activities and risks are in scope, how risk considerations enter strategy and performance discussions, and when the framework is reviewed.
This workshop develops a high-level framework for a hypothetical regional mutual insurer, Cedar Harbor Mutual. It writes down the major design choices as one coherent system. The aim is not to prescribe a universal organization chart or a particular risk-measurement model. It is to make the framework sufficiently specific that executives and business leaders can use it to guide planning, monitor emerging conditions, and revisit decisions. This approach is aligned with the CAS Exam 9 (Risk Management for Actuaries) syllabus.
A high-level framework should be specific enough to support decisions but not so detailed that it becomes a substitute for operating procedures. For this workshop, Cedar Harbor’s framework is built from four connected questions:
- Objectives: What outcomes should risk management support?
- Scope and principles: Which parts of the business are covered, and what design rules will guide the framework?
- Strategy and performance: How will strategic choices be translated into risk considerations and monitored?
- Review: How will the organization check whether the framework remains useful?
Set Objectives and Boundaries First
A framework needs objectives stated in terms that can guide trade-offs. “Manage risk effectively” is too vague: it does not identify what the insurer wants to preserve, achieve, or balance. Cedar Harbor’s objectives could instead include maintaining the ability to pay covered claims, supporting policyholder service through periods of stress, pursuing sustainable growth within its chosen markets, and making material decisions with a clear view of their risk and resource implications.
Scope answers what the framework covers. Cedar Harbor should identify the legal entities and business activities included, the time horizons used for different decisions, and the material risk categories considered. For example, a framework may cover underwriting and claims, reinsurance, investments, distribution, technology, third-party services, and supporting operations. Its risk scope may include catastrophe, underwriting, market, credit, liquidity, operational, and strategic risks. Listing a category does not mean that every risk is measured in the same way; it means the framework has a place for material exposures to be considered.
The scope also needs boundaries. Cedar Harbor might state that the framework applies to all of its property and small commercial lines, including outsourced services that could disrupt claims or policy administration. It may identify emerging risks as in scope for assessment even when reliable numerical estimates are not available. These choices prevent a narrow interpretation in which only risks with an existing model or assigned owner receive attention.
Worked Example: Define Objectives and Scope for Cedar Harbor
Cedar Harbor writes homeowners and small commercial property insurance in three neighboring states. It is considering expansion into a fourth state, uses an external vendor for policy administration, and buys catastrophe reinsurance. Construct a concise set of framework objectives and scope boundaries that would support a decision on the expansion.
Step 1: State the outcomes. The objectives should identify the outcomes the decision must protect or advance. For Cedar Harbor, these are: maintain reliable claim-paying capacity; provide timely service to policyholders; pursue sustainable growth in its selected markets; and evaluate material strategy changes in light of their risks and resource demands.
Step 2: Set the organizational and activity boundary. Include the insurer’s existing business and any proposed fourth-state operation. Include underwriting, claims, reinsurance, investments, distribution, and the policy-administration vendor because the vendor’s performance could affect service and operations.
Step 3: State the risk boundary. Include catastrophe and underwriting risks associated with property coverage; credit and counterparty risks associated with reinsurance and investments; operational risks associated with claims, technology, and the vendor; and strategic risks associated with entering a new market. Treat material emerging exposures as assessable even if they cannot yet be quantified precisely.
Step 4: Make the scope useful for the decision. The expansion review should compare expected business benefits with changes in exposure, operational capacity, reinsurance needs, and the ability to serve policyholders. The framework does not decide whether expansion is attractive; it ensures the relevant considerations enter the decision.
Check. The result includes the new state and the external vendor rather than limiting scope to current insurance contracts. It also links the framework objectives to the actual expansion decision.
Choose Principles That Fit the Insurer
Principles are design rules for applying the framework consistently. They are not a list of risks, and they do not replace judgment. Cedar Harbor can select principles that fit its mutual structure, regional concentration, and reliance on external services. A practical set might be:
- Integrated: Consider risk in strategy, planning, underwriting, reinsurance, investment, and operating decisions rather than isolating it in a separate annual exercise.
- Tailored: Match methods and reporting detail to the insurer’s scale, business mix, and exposure concentration.
- Forward-looking and responsive: Consider plausible changes in hazards, markets, operations, and business conditions, not only recorded past outcomes.
- Decision-useful: Give decision-makers information they can interpret and connect to choices or actions.
- Continuously improved: Use experience, changes in the business, and review findings to refine the framework.
These principles create practical tests. If a report is technically sophisticated but does not change a decision or clarify uncertainty, it may not satisfy the decision-useful principle. If a review ignores the policy-administration vendor because it is not part of the insurer’s legal entity, it may fail the integrated and tailored principles. Principles should be selected for their relevance, then reflected in everyday processes.
Worked Example: Select Framework Principles for a New Initiative
Cedar Harbor is considering offering a new commercial property product. The product would be distributed through a small group of brokers, depend on the existing claims platform, and include properties with limited historical loss experience. Select and apply three framework principles to the proposal.
Step 1: Identify what makes the proposal distinctive. The proposal adds a product with limited experience, a concentrated distribution channel, and potential reliance on current claims systems. These features suggest uncertainty in both underwriting and operations.
Step 2: Apply the tailored principle. Cedar Harbor should not assume that the methods used for its mature homeowners portfolio are sufficient. It should identify the information limitations and use appropriate caution when assessing the new product’s exposure. The principle does not require a particular model; it requires a method suited to the available data and decision.
Step 3: Apply the integrated principle. The assessment should include underwriting, distribution, claims, reinsurance, and system capacity. Reviewing only projected premium and expected claims would omit risks arising from the broker channel and operational dependencies.
Step 4: Apply the forward-looking principle. The decision should consider how the product could perform under plausible adverse conditions, including a concentration of claims or a surge in claim activity that tests the claims platform. Limited historical experience is not evidence that the exposure is immaterial.
Step 5: Check decision usefulness. The review should identify what information or conditions would lead Cedar Harbor to proceed, modify the proposal, or pause it. The principles are useful because they shape what is examined and how uncertainty affects the decision.
Link Strategy, Risk, and Performance
A framework becomes operational when a strategic choice is translated into risk considerations, observable information, and a response. This sequence gives the insurer a way to connect what it wants to do with what could prevent it from achieving the intended result. The measures need not all be financial. They may include exposure indicators, service indicators, implementation milestones, and qualitative assessments.
For Cedar Harbor’s proposed expansion, a strategic objective might be to grow property business in the fourth state without weakening claim service or exceeding the organization’s willingness to retain concentrated catastrophe exposure. Risk considerations include geographic accumulation, pricing uncertainty, reinsurance availability, vendor capacity, and the ability to adjust underwriting as experience develops. Useful performance information could include growth against plan, concentration by location, claim-handling timeliness, and whether reinsurance arrangements remain suitable for the exposure. The framework should state who reviews the information and what types of conditions prompt reconsideration, without pretending that an indicator alone automatically determines the decision.
The distinction between appetite, limits, and performance measures is important. At a high level, risk appetite describes the kinds and amount of risk an organization is willing to accept in pursuing its objectives. A limit translates an approved boundary into a constraint or escalation point for a defined exposure or activity. A performance measure indicates progress or results; it may be related to risk without being a risk limit. The terms should not be used interchangeably.
The logic of this chain can be justified directly. An objective identifies a desired outcome. A strategic choice selects an activity intended to produce that outcome. Because the activity is exposed to uncertainty, the framework identifies relevant risks. An indicator provides evidence about an exposure, condition, or result. Comparing that evidence with the organization’s expectations can then support a review or action. If any link is missing, the information may not guide the original objective: for example, a growth metric alone does not show whether growth is increasing concentration or straining service capacity.
Worked Example: Turn an Expansion Strategy Into a Monitoring Plan
Cedar Harbor plans to write no more than 1,200 new property policies during its first year in the fourth state. Management wants to evaluate progress quarterly. It has set an internal planning trigger to pause new sales for review if the state’s share of total insured property value exceeds 18%, and a service objective that at least 90% of claims are acknowledged within two business days. These are hypothetical management measures and triggers, not industry standards. Construct a monitoring plan and interpret the following quarter-end results: 270 new policies written, 19% of total insured property value in the state, and 88% of claims acknowledged within two business days.
Step 1: Connect the objective and strategy. The objective is sustainable expansion while maintaining service and managing concentration. The strategic activity is writing up to 1,200 policies in the new state during the year.
Step 2: Select indicators for different dimensions. Policy count tracks implementation against the planned volume. The share of total insured property value tracks geographic concentration. The timely-acknowledgment percentage tracks a service outcome that could be affected by expansion.
Step 3: Interpret growth against the annual plan. The first quarter’s policy count is 270. The arithmetic pace for four equal quarters would be \(1{,}200/4=300\) policies per quarter. Thus, the observed count is 30 below that even pace. This is a comparison point, not proof that the annual objective will be missed; future quarters may differ.
Step 4: Apply the stated concentration trigger. The observed share is 19%, which exceeds the 18% planning trigger by 1 percentage point. Under the stated framework, this calls for review before treating the expansion as business as usual. It does not automatically prescribe a particular underwriting action.
Step 5: Compare service performance with its objective. The observed 88% is 2 percentage points below the 90% objective. The framework should prompt investigation of whether the shortfall relates to volume, vendor capacity, process changes, or another cause, and should consider whether corrective action is needed.
Check. A single “growth is on track” conclusion would be incomplete. The policy count is below an even quarterly pace, concentration has crossed its stated review trigger, and service is below its objective. The monitoring plan preserves these distinctions and directs attention to the issues requiring assessment.
Establish a Repeatable Review Cycle
A framework is not complete if it has no method for checking whether assumptions and decisions remain appropriate. A review cycle should combine regular review with events that warrant an earlier assessment. Regular reviews create discipline; event-triggered reviews help the insurer respond when a material change makes the existing view stale.
For Cedar Harbor, a practical cycle could include quarterly review of key strategy and performance indicators, an annual assessment of objectives and framework scope during planning, and an out-of-cycle review after specified material events. Examples of triggers include a major catastrophe, a significant reinsurance change, a serious disruption at a critical service provider, a material change in strategic direction, or evidence that an indicator has repeatedly failed to identify a concern. The event list should be specific enough to guide escalation but not imply that only listed events can matter.
State which objective, decision, or framework assumption is being reviewed. Avoid a meeting that collects data without a decision purpose.
Bring together the indicators, material changes, and qualitative information related to the question. Identify gaps and uncertainty rather than presenting incomplete evidence as conclusive.
Check performance against objectives, appetite statements, limits, or review triggers as relevant. Keep those categories distinct.
Document the conclusion, any action, the person or group responsible for follow-up, and the timing of the next check.
At the scheduled annual review, consider whether objectives, scope, principles, information, or the review cadence should change.
This sequence explains why review is more than a reporting calendar. The organization starts with a question, evaluates relevant evidence against a stated expectation, and records what follows. A regular cycle without event triggers can be too slow when conditions change quickly; event triggers without a regular cycle can leave gradual changes unnoticed. Using both supports a repeatable process and a timely response.
Common Mistakes and a Framework Check
- Writing aspirations without decision meaning. “Protect policyholders” is important but incomplete unless the framework also clarifies which decisions, exposures, or outcomes are considered.
- Defining scope only by legal entity. Outsourced services, distribution arrangements, or dependencies may be relevant even when they sit outside the insurer’s organizational boundary.
- Confusing measures with limits. A performance indicator can show an unfavorable result without being a formal limit. State what a measure means and what response it prompts.
- Assuming a quarterly calendar is enough. A fixed cadence needs event-triggered review for material changes between scheduled reviews.
- Collecting risk information without tying it to strategy. Each material indicator should have a clear relationship to an objective or decision; otherwise, the framework can become a reporting exercise.
Check Your Understanding
For each problem, identify the framework design choice or interpretation that best fits the stated facts.
- A hypothetical mutual insurer writes farm and homeowners coverage, and outsources catastrophe claims intake. It is reviewing its framework scope. Name two business activities and one external dependency that should be explicitly considered, and state why. (Answer: Include underwriting and claims activity, and the catastrophe claims-intake vendor; the vendor can affect operational continuity and policyholder service even though it is external.)
- An insurer’s objective is sustainable growth in a new territory. Its only proposed quarterly measure is premium growth. Name two additional dimensions that should be monitored and explain what each contributes. (Answer: Geographic concentration indicates how exposure accumulates in the territory; claims or service performance indicates whether growth is affecting the insurer’s ability to serve policyholders.)
- A hypothetical company sets a 15% concentration trigger for management review. At quarter end, concentration is 16%, while total policies written are below plan. What should the framework conclude, and what should it not conclude? (Answer: It should trigger review of concentration and the growth plan; it should not conclude automatically that the insurer must stop writing business or that the trigger itself is a performance target.)
- A critical vendor reports a disruption risk that could affect policy administration, but the next annual framework review is eight months away. What feature of the review cycle should apply, and what should the initial review establish? (Answer: An event-triggered review should apply; it should establish the potential effect on objectives and operations, relevant evidence and uncertainty, and whether immediate follow-up or a broader framework reassessment is needed.)
- A board report shows that 92% of claims were acknowledged within two business days, against an objective of 90%, while a proposed new product creates an unassessed concentration in one region. Is the favorable service result enough to support proceeding? Explain. (Answer: No. The service objective is exceeded, but it does not resolve the separate concentration concern; the framework should assess that risk and its implications before the decision.)