Description
Certain aspects of many of the risk management standards have come under criticism for having no measurable improvement on risk, whether the confidence in estimates and decisions seem to increase.
Risk Management in the Insurance Industry
December 2001 NAIC Meeting Session 7a Sunday, December 9, 2001
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 1
Panelists
Moderator: Andrea M. Sweeny, FCAS, MAAA Casualty Actuarial Assistance LLC Presenters: P & C – Jerry Miccolis, FCAS, MAAA Tillinghast – Towers Perrin Health – Donna Novak, ASA, MAAA MMC Life – Dave Sandberg, FSA, MAAA Allianz Life
Overview
• Outline some framework for assessing insurance company risk in an organized way • Provide some concrete examples/models for risk management for: -specific risks -use in day to day company decision making -integrated insurance company risk
Overview (continued)
• Look at risk management structures in the light of the 9/11 and subsequent terrorist events • Outline some of the stresses/impediments in designing a good risk management process • Summarize some recent insurance industry findings • Highlight area of research and sources for more information
We Hope You Will Take Away
• A sense of the structure of an insurance company risk management process • An understanding of the importance of an integrated program • An indication of the volume and kinds of research being done and of how to tap the work that has been completed to date
Risk Management Practices in the Property/Casualty Industry
Jerry Miccolis, FCAS, MAAA Tillinghast – Towers Perrin
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 6
What We’ll Cover
• Some thought-provoking case studies
– – –
Company #1: Risk management as business model Company #2: A new Chief Risk Officer’s agenda Company #3: Enterprise Risk Management -- a unifying framework
• ERM -- the Casualty Actuarial Society view • Closing thoughts -- risk management in the wake of September 11
Company #1: Risk Management As Business Model
• Property catastrophe reinsurer • The objective is to optimally leverage capital • The focus is on underwriting risk
– –
Includes asset risk and insurance risk Does not include strategic risk, operational risk Start with world-class natural catastrophe modeling and economic scenario generation modeling Simulate overall “probability of profit” distribution for the enterprise
• The model
– –
Company #1: Risk Management As Business Model
• The model (cont’d)
– –
Determine risk tolerance -- and therefore required capital Evaluate each deal based on its impact on the overall profitability distribution
• •
How much incremental capital would the deal cost? Does the expected return on this required capital justify its acquisition?
–
Every manager and underwriter is trained on the model and uses it in the course of their work
Company #2: A New Chief Risk Officer’s Agenda
• Global property/casualty company • Charge: Design a conceptual framework, language and tool set to incorporate consideration of risk into strategic decision-making • Laying the foundation – Metrics -- internal and external alignment – Risk identification -- top-down based on business relevance – Operational planning -- “stochasticize” the drivers – Investment risk management -- alignment with above
Company #2: A New Chief Risk Officer’s Agenda
• Building on the foundation
– – –
Catastrophe monitoring -- portfolio approach Strategic planning -- using risk-based language New initiatives -- risk-based evaluation criteria Business continuity Internal audit Regulatory compliance
• Related activities
– – –
Company #3: ERM -- A Unifying Framework
• Regional property/casualty company • Build structural simulation model of insurance and non-insurance operations to inform strategic decision-making • Comprehensive, integrated approach
– – – – –
Risk assessment Capital adequacy Capital allocation Asset allocation Reinsurance strategy
ERM--A Unifying Framework
I ncr ease val ue
Enhance gr ow t h I ncr ease r et ur n I m pr ove consi st enc y
Est abl i sh capi t al
U nder st and bot hi nt er nal and ext er nalenvi r onm ent s
Econom i c condi t i ons Soci al / l egalt r ends Pol i t i cal / r egul at or y cl i m at e N at ur alcat ast r ophes Ri sk appet i t e R eput at i on/ r at i ng agency C ust om er behavi or C om pet i t i on I nvest or expect at i ons Pr ocesses Peopl e Expansi on/ di ver si f i cat i on C ul t ur e Di st r i but i on
H ol i st i cal l y m anage al lr i sks
Fi nanci alR i sk H azar d Ri sk
I nvest i gat e bot hf i nanci al and oper at i onalst r at egi es
C api t al st r uct ur e I nvest m ent st r at egy I nt er nalcont r ol s Pr i ci ng Pr oduct mi x D ynam i c hedgi ng R ei nsur ance I ncent i ve pr ogr am s Hi r i ng/ t r ai ni ng C ust om er ser vi ce M ar ketst r at egy Di st r i but i on M &A Technol ogy
Expl oi t nat ur alhedges and por t f ol i o ef f ect s
St r at egi c Ri sk O per at i onalR i sk
Technol ogy
ERM -- The Casualty Actuarial Society View
• Definition
“The process by which organizations in all industries assess, control, exploit, finance and monitor risks from all sources for the purpose of increasing the organization’s short and long-term value to its stakeholders” • Framework
– –
Risk type Risk management process step
ERM -- The Casualty Actuarial Society View
Ri sk M anagem entPr ocess St ep Ri sk Type
St r at egi c Est abl i s A nal yze/ A ssess/ Tr eat / M oni t or h i f y I i or i t i ze Expl oi t and I dent i f y Q uant nt egr at e Pr C ont ext R i Ri sks Ri sks Ri sks R evi ew sks Ri sks
O per at i onal
Fi nanci al
H azar d
Closing Thoughts -- Risk Management in the Wake of September 11
• • • • • Exposure management Extreme event risk planning Disaster response Capital management Stakeholder relations
Additional Reference Material
• Casualty Actuarial Society: ERM bibliography • Enterprise Risk Management in the Insurance Industry -Tillinghast 2000 Benchmarking Survey Report • Creating Value Through Enterprise Risk Management: A Practical Guide for the Insurance Industry -- Tillinghast monograph, July 2001 • September 11, 2001: Implications for the Insurance Industry -- Tillinghast white paper, September 2001 • “ERM and September 11” -- International Risk Management Institute article, November 2001
Risk Management Practices in the Health Industry
Donna Novak, ASA, MAAA MMC, Enterprise Risk
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 18
MMC ENTERPRISE RISK: Illustrative Risk Sources
Externally driven
Unexpected HC Trends Rate approval Asset value Interest rates Credit Failed provider contracts Pricing Liquidity and cash flow Product development Customer demand
Financial Risk Sources
Strategic Risk Sources
Customer/ industry changes Competitive Pressure
Internally driven
Intellectual capital
Mergers & Acquisitions
Contracts
General public Employees
Consumers
Patient Protection Liability Products and Services Vendors and suppliers
Process controls Information systems Regulations Accounting Underwriting controls Process Talent acquisition Talent management Board composition
Epidemics
Hazard Risk Sources
Operational Risk Sources
MMC ENTERPRISE RISK: Current Risk Sources
Employer rate Unexpected HC Trends increase Declining resistance Potential Customer demand Rate approval investment Financial Risk Sources Strategic Risk Sources Recession return Customer/ Asset value industry Changing changes Demographics RBC and Internally driven Interest rates liquidity Intellectual capital Member Competitive requirements resistance to Credit Pricing Pressure managed care Product Provider development Failed provider insolvencies Mergers & Market Liquidity and contracts Acquisitions consolidation cash flow Process controls Movement Information systemsto web-based tech Regulations Accounting Underwriting controls Process Privacy/ Talent acquisition HIPPA Talent management Board composition HC (Rx) trends
Externally driven
Contracts
General public Employees
Consumers Federal Patient Protection Epidemics
Patient Protection Liability Products and Services Vendors and suppliers
Hazard Risk Sources
Operational Risk Sources
How Can Companies Manage Underwriting Risk?
• Diversification of Products • Underwriting to Select Better Risks • Transfer Risk
– – – –
Provider Contracts Groups Retain More Risk Individuals Retain More Risk through Higher Deductibles, Coinsurance, and Copay Transfer through Reinsurance
• Have Sufficient Capital to Absorb Losses
How Much Capital Do We Need?
• NAIC Risk-Based Capital • Business Model
Business Model Approach
• Loss Ratio etc. Variability Analysis • DFA/UVS
–
Stochastic Modeling of Gain and Loss (G&L) Over a Period of Time
• Underwriting Cycle Analysis
Model the Impact of Each Risk
Pr ovi der I nsol venci es
R x Tr ends
Ri sk ofLoss
. 050 . 037 . 025 . 012 . 000 0 1000 750 500 250 0 10 20 30 40 50 60 70 80
Loss $m
Capital Sufficiency
• Blue Cross Blue Shield Plans • Multi-state Companies in Multiple States with RBC Requirements • Single-State Companies with RBC Requirements • Single-State Companies without RBC Requirements
– –
NAIC filing of RBC No NAIC filing
Risk Management Practices in the Life Industry
Dave Sandberg, FSA, MAAA Allianz Life
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 26
The GOAL: Convert This
Information Strategic/Tactical • Take Risk • Shed Risk • Avoid Risk
XYZ’s Risk Profile
EXTERNAL
Organization
FINANCIAL STRATEGIC
Operating Decisions & Responses • Prevention • Mitigation • Recovery Results
INTERNAL
HAZARD
OPERATIONAL
Financial Perf. Perf. Measures • Capital Structure • Capital Budgeting • Pricing • Ins./Hedge/Retain
Who manages what risk and how do they relate?
What information and performance measures are used to make decisions?
How are decisions made?
Into an Enhanced Risk Management System
Information
XYZ’s Risk Profile
EXTERNAL
TOP DOWN
Strategic/Tactical • Take Risk • Shed Risk • Avoid Risk
Organization
FINANCIAL STRATEGIC
Operating Decisions & Responses • Prevention • Mitigation • Recovery Results
INTERNAL
HAZARD
OPERATIONAL
Perf. Perf. Measures
BOTTOM UP
Financial • Capital Structure • Capital Budgeting • Pricing • Ins./Hedge/Retain
Diverse Audiences
• • • • •
1. 2. 3. 4.
Policyholders (Mutuals) Regulators – State & Possibly Federal & Banking Shareholders (Public Disclosure Only) Private Investor
5. Foreign Investor, Publicly Traded or Regulated Requirements 6. 7. 8. 9. US Owner, Publicly Traded, Not Insurance Rating agency Self Insured Company Internal Management
• • • •
Diverse Language of Risk Measurement
•
1. Formula Based
» »
NAIC Life Risk Categories of C1-C4 NAIC P&C Risk Categories of R1-R7
• • • •
2. Silo Based (Banking View) – Credit, Liquidity, Market, Legal, OR, Reputational 3. SOA Survey - Assets, Liabilities, A/L, OR, Enterprise 4. Time Horizon – VaR vs. EV 5. Economic Capital - RAROC
Mixture of Owners and Regulators Leads to Diverse Scorecards
•
1.
NAIC RBC Formulas - Meant only to flag weak companies. Not meant to evaluate or rank a “good” company to others or to itself over time 2. Federal Reserve – Credit, Liquidity, Market, Legal, OR, Reputational 3. Life Appointed Actuary - Main Focus is on Interest Rate Risk 4. Foreign Owners - RAROC & Economic Capital 5. Current GAAP Earnings & ROE 6. Sales Growth & Assets Under Management
• • • • •
For the Following Diverse Managers of Co. Risk
• • • • • • • • • •
1.
Appointed Actuary
2. 3. 4. 5. 6. 7. 8. 9.
Pricing Actuary Chief Actuary Chief Underwriter Chief Financial Officer Chief Marketing Officer Chief Risk Officer (If Present) Internal Audit Board of Directors
10. Regulator
Integrated Regulatory Classification Schemes
•
Canada - Office of the Superintendent of Financial Institutions
– – – – – – –
§ § § § § § §
Credit Market Insurance Operational Liquidity Legal And Regulatory Strategic
•
Sweden – Finansinspektionen
– – – –
§ § § §
Credit Risks Market Risks Underwriting Risks (Insurance) Reinsurance Risks (Insurance)
More Integrated Regulatory Classification Schemes
• Sweden – Continued
– – – –
§ § § §
Reserving Risks (Insurance) ALM-Risks (Insurance) Solvency Risks (Insurance) Operational Risks
•
UK – Financial Services Authority
– – – – –
§ § § § §
Credit Market Operational Insurance Group
Understanding The Current Landscape The Good, The Bad & The Ugly
–
A. SOA Finance Practice Survey in 1999 – State of risk position reporting in insurance industry in North America B. SOA Risk Management Task Force C. 2000 Tillinghast survey D. 2001 MMC Survey E. 2001 M&R Survey F. NAIC/Federal Reserve Risk Classification Project G. IAA Solvency Working Party - In Progress
– – – – – –
SOA Finance Practice Survey in 1999 – State of risk position reporting in insurance industry in North America = Measurement & Monitoring, not Management
Objective Develop a better understanding of industry practices in risk position reporting (RPR) Coverage types and depth of RPRs turnaround time and frequency of RPRs who typically receives RPRs what do these reports typically encompass the efficiency (accuracy/ease of collection) of the data collected for these reports how the industry believes these reports will change and evolve
Survey Results
AssetR PR s
D ur at i on The G r eeks Li qui di t y C onvexi t y Val ue atR i sk Per f or m ance M easur e/ At t r i but i on
Li abi l i t y R PR s
Exper i ence St udi es Em bedded Val ue and Var i ance Anal ysi s D et er mi ni st i c & St ochast i c Scenar i o Test i ng Mi sm at ch R i sk ( e. g.dur at i on,convexi t y,l i qui di t y) Tr ansf erPr i ci ng Em pi r i calEval uat i on R egr essi on Anal ysi s I nf l uence D i agr am s and t he D el phiM et hod
Asset / l i abi l i t y R PR s
O per at i onalR PR s
RESULTS BEING COMMUNICATED VIA:
•Article submitted to the NAAJ •Complete results posted to the SOA website with a covering index (flyer in The Actuary) •Magazine articles in Contingencies, Risks & Rewards and Best’s Review
Questions of Interest to SOA Risk Management Task Force - To Both Educate & Further Research
• 1. RBC covariance and correlation • 2. Policyholder behavior in extreme situations • 3. Extreme value models • 4. Modeling techniques relating to adequacy of scenarios to be tested • 5. Risk management & Shareholder value • 6. Pricing for risk • 7. Equity risk quantification
2000 Tillinghast Survey “Enterprise Risk Management in the Insurance Industry: 2000 Benchmarking Survey Report
Results from 66 insurance industry chief financial officers, chief actuaries and chief risk officers in major markets worldwide Geography: 60% North America, 40% rest of world Company structure: stock, mutual, other Type of operations: life insurance, property/casualty insurance, mutual funds, banking Company size: $25 million to $10 billion in direct written premiums For the European ALM survey, results from 46 life insurance companies in 7 countries Supplemented with in-depth interviews/company visits
Tillinghast Key findings
• Very few companies have a chief risk officer (CRO), although the position is much more prevalent outside of North America • Companies recognize the importance of integrating risk into their company’s strategic, operational and financial planning, but not all do so because of:
Tools – Organizational turf – Processes – Time
–
• Most companies include operational risk in the internal audit plan, but far fewer include financial risk
Continued . . .
Other key findings - Tillinghast
• Less than half of respondents are factoring interactions among risk sources into their:
Assessment/measurement of risks – Determination of diversification benefit – Mitigation/financing strategies
–
• There is a high level of dissatisfaction with respect to:
– – – – –
Stochastically modeling the important risks Including operational risk in determining economic capital Prioritizing disparate risks using a common metric Optimizing financial and operational strategies in light of risk/reward requirements Coordinating all these activities within a coherent framework
MMC EIU Study - Key Findings
? ERM is being adopted widely: 41% of companies are implementing ERM (53% in Europe, 34% in North America, 33% in Asia) ? Companies using ERM are more confident in their ability to manage risk: Of those using ERM, 90% reported being very confident, compared with just 45% of those not using ERM ? Firms adopt ERM for a wide range of reasons ? Companies believe ERM can improve their P/E ratio and cost of capital: 84% of companies reported a link between ERM and these metrics ? Executives believe that communicating their ERM activities to investors can be beneficial: 50% of respondents at public companies say they have much to gain by advertising their efforts to the investment community ? Non-traditional risks pose the greatest threat: Top three were customer loyalty, competitive threats and operational failure
EIU Study - Key Findings
? ERM requires structural and cultural change ? Few companies measure the integrated effects of risk across the entire organization: Only 15% of companies aggregate risks across their organization. Many have started with financial risks. Integration will spread to operational risks next. ? Current quantification methods are inadequate for intangible risks: 53% report this as an obstacle to ERM. ? There is no single approach to ERM
MMC EIU Study - ERM, why now?
? Outsiders are pushing companies to manage risk more comprehensively and systematically ? Investors are becoming more sensitive to any deviation from earnings estimates, encouraging companies to address earnings volatility ? Shareholders are increasingly holding boards of directors and senior executives to higher accountability standards ? The continuing convergence of the traditional capital and insurance markets is yielding innovative approaches to managing emerging risks ? Many companies perceive a rise in the number and severity of the risks they face
What are companies hoping to get from ERM?
Common understanding of risk across functions and business units Better understanding of risk for competitive advantage Safeguard against earnings-related surprises Ability to respond effectively to low-probability critical/catast risks Cost savings through better management of internal resources More efficient capital allocation Ability to avoid low-probability critical/catastrophic risks Ability to identify aggregating and/or offsetting risk patterns Better regulatory compliance Improvement in company's P/E ratio Cost savings through reductions in hedging and insurance costs Ability to compensate management based on risk-adjusted returns
0
Source: EIU survey 2001
10
20
30
40
50
60
70
% responding “important” or “highly important”
What are regulators hoping to get from ERM?
?
Moving on to Management of Risk
–
A. Risk Reduction - Reduce Sales, Stricter U/Wing, Redesign Product(Sept 11),Improve Operating Practices(Claim Infor/causes),training B. Risk Integration – ALM – Manage risk by buying assets to match liability to acceptable risk tolerance level - + Buy reinsurance C. Risk Diversification – Multiple Product Lines, Broader geographic area D. Risk Hedging- Natural or introduce counterparty risk E. Risk Transfer – Sell, Securitize, Reinsure to reduce volatility F. Risk Disclosure -???? To be Continued
–
–
– –
–
Risk Disclosure
– –
A. One of Three Proposed Pillars in Basel 2 for Banks B. Nature of Disclosure is Unclear - Three sample approaches
• • •
1. Public via 10K/Q. Would overwhelm reader with assumptions 2. Regulator via confidential process (banking) 3. Prospective looking balance sheet with public disclosure of actual to expected variances (Schedual H & O in Blue Book)
–
C. Life Insurance is only Balance sheet where 99% of the reserves (the major liability risk item) include no indication of what the company actually believes about the listed future obligations other than that they are adequate.
Risk Management in the Insurance Industry
For further information regarding this presentation please contact Meredith Detweiler, Financial Reporting Policy Analyst with the American Academy of Actuaries at [email protected] or at 202-223-8196
Risk Management in the Insurance Industry
December 2001 NAIC Meeting Session 7a Sunday, December 9, 2001
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 51
doc_934775417.pdf
Certain aspects of many of the risk management standards have come under criticism for having no measurable improvement on risk, whether the confidence in estimates and decisions seem to increase.
Risk Management in the Insurance Industry
December 2001 NAIC Meeting Session 7a Sunday, December 9, 2001
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 1
Panelists
Moderator: Andrea M. Sweeny, FCAS, MAAA Casualty Actuarial Assistance LLC Presenters: P & C – Jerry Miccolis, FCAS, MAAA Tillinghast – Towers Perrin Health – Donna Novak, ASA, MAAA MMC Life – Dave Sandberg, FSA, MAAA Allianz Life
Overview
• Outline some framework for assessing insurance company risk in an organized way • Provide some concrete examples/models for risk management for: -specific risks -use in day to day company decision making -integrated insurance company risk
Overview (continued)
• Look at risk management structures in the light of the 9/11 and subsequent terrorist events • Outline some of the stresses/impediments in designing a good risk management process • Summarize some recent insurance industry findings • Highlight area of research and sources for more information
We Hope You Will Take Away
• A sense of the structure of an insurance company risk management process • An understanding of the importance of an integrated program • An indication of the volume and kinds of research being done and of how to tap the work that has been completed to date
Risk Management Practices in the Property/Casualty Industry
Jerry Miccolis, FCAS, MAAA Tillinghast – Towers Perrin
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 6
What We’ll Cover
• Some thought-provoking case studies
– – –
Company #1: Risk management as business model Company #2: A new Chief Risk Officer’s agenda Company #3: Enterprise Risk Management -- a unifying framework
• ERM -- the Casualty Actuarial Society view • Closing thoughts -- risk management in the wake of September 11
Company #1: Risk Management As Business Model
• Property catastrophe reinsurer • The objective is to optimally leverage capital • The focus is on underwriting risk
– –
Includes asset risk and insurance risk Does not include strategic risk, operational risk Start with world-class natural catastrophe modeling and economic scenario generation modeling Simulate overall “probability of profit” distribution for the enterprise
• The model
– –
Company #1: Risk Management As Business Model
• The model (cont’d)
– –
Determine risk tolerance -- and therefore required capital Evaluate each deal based on its impact on the overall profitability distribution
• •
How much incremental capital would the deal cost? Does the expected return on this required capital justify its acquisition?
–
Every manager and underwriter is trained on the model and uses it in the course of their work
Company #2: A New Chief Risk Officer’s Agenda
• Global property/casualty company • Charge: Design a conceptual framework, language and tool set to incorporate consideration of risk into strategic decision-making • Laying the foundation – Metrics -- internal and external alignment – Risk identification -- top-down based on business relevance – Operational planning -- “stochasticize” the drivers – Investment risk management -- alignment with above
Company #2: A New Chief Risk Officer’s Agenda
• Building on the foundation
– – –
Catastrophe monitoring -- portfolio approach Strategic planning -- using risk-based language New initiatives -- risk-based evaluation criteria Business continuity Internal audit Regulatory compliance
• Related activities
– – –
Company #3: ERM -- A Unifying Framework
• Regional property/casualty company • Build structural simulation model of insurance and non-insurance operations to inform strategic decision-making • Comprehensive, integrated approach
– – – – –
Risk assessment Capital adequacy Capital allocation Asset allocation Reinsurance strategy
ERM--A Unifying Framework
I ncr ease val ue
Enhance gr ow t h I ncr ease r et ur n I m pr ove consi st enc y
Est abl i sh capi t al
U nder st and bot hi nt er nal and ext er nalenvi r onm ent s
Econom i c condi t i ons Soci al / l egalt r ends Pol i t i cal / r egul at or y cl i m at e N at ur alcat ast r ophes Ri sk appet i t e R eput at i on/ r at i ng agency C ust om er behavi or C om pet i t i on I nvest or expect at i ons Pr ocesses Peopl e Expansi on/ di ver si f i cat i on C ul t ur e Di st r i but i on
H ol i st i cal l y m anage al lr i sks
Fi nanci alR i sk H azar d Ri sk
I nvest i gat e bot hf i nanci al and oper at i onalst r at egi es
C api t al st r uct ur e I nvest m ent st r at egy I nt er nalcont r ol s Pr i ci ng Pr oduct mi x D ynam i c hedgi ng R ei nsur ance I ncent i ve pr ogr am s Hi r i ng/ t r ai ni ng C ust om er ser vi ce M ar ketst r at egy Di st r i but i on M &A Technol ogy
Expl oi t nat ur alhedges and por t f ol i o ef f ect s
St r at egi c Ri sk O per at i onalR i sk
Technol ogy
ERM -- The Casualty Actuarial Society View
• Definition
“The process by which organizations in all industries assess, control, exploit, finance and monitor risks from all sources for the purpose of increasing the organization’s short and long-term value to its stakeholders” • Framework
– –
Risk type Risk management process step
ERM -- The Casualty Actuarial Society View
Ri sk M anagem entPr ocess St ep Ri sk Type
St r at egi c Est abl i s A nal yze/ A ssess/ Tr eat / M oni t or h i f y I i or i t i ze Expl oi t and I dent i f y Q uant nt egr at e Pr C ont ext R i Ri sks Ri sks Ri sks R evi ew sks Ri sks
O per at i onal
Fi nanci al
H azar d
Closing Thoughts -- Risk Management in the Wake of September 11
• • • • • Exposure management Extreme event risk planning Disaster response Capital management Stakeholder relations
Additional Reference Material
• Casualty Actuarial Society: ERM bibliography • Enterprise Risk Management in the Insurance Industry -Tillinghast 2000 Benchmarking Survey Report • Creating Value Through Enterprise Risk Management: A Practical Guide for the Insurance Industry -- Tillinghast monograph, July 2001 • September 11, 2001: Implications for the Insurance Industry -- Tillinghast white paper, September 2001 • “ERM and September 11” -- International Risk Management Institute article, November 2001
Risk Management Practices in the Health Industry
Donna Novak, ASA, MAAA MMC, Enterprise Risk
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 18
MMC ENTERPRISE RISK: Illustrative Risk Sources
Externally driven
Unexpected HC Trends Rate approval Asset value Interest rates Credit Failed provider contracts Pricing Liquidity and cash flow Product development Customer demand
Financial Risk Sources
Strategic Risk Sources
Customer/ industry changes Competitive Pressure
Internally driven
Intellectual capital
Mergers & Acquisitions
Contracts
General public Employees
Consumers
Patient Protection Liability Products and Services Vendors and suppliers
Process controls Information systems Regulations Accounting Underwriting controls Process Talent acquisition Talent management Board composition
Epidemics
Hazard Risk Sources
Operational Risk Sources
MMC ENTERPRISE RISK: Current Risk Sources
Employer rate Unexpected HC Trends increase Declining resistance Potential Customer demand Rate approval investment Financial Risk Sources Strategic Risk Sources Recession return Customer/ Asset value industry Changing changes Demographics RBC and Internally driven Interest rates liquidity Intellectual capital Member Competitive requirements resistance to Credit Pricing Pressure managed care Product Provider development Failed provider insolvencies Mergers & Market Liquidity and contracts Acquisitions consolidation cash flow Process controls Movement Information systemsto web-based tech Regulations Accounting Underwriting controls Process Privacy/ Talent acquisition HIPPA Talent management Board composition HC (Rx) trends
Externally driven
Contracts
General public Employees
Consumers Federal Patient Protection Epidemics
Patient Protection Liability Products and Services Vendors and suppliers
Hazard Risk Sources
Operational Risk Sources
How Can Companies Manage Underwriting Risk?
• Diversification of Products • Underwriting to Select Better Risks • Transfer Risk
– – – –
Provider Contracts Groups Retain More Risk Individuals Retain More Risk through Higher Deductibles, Coinsurance, and Copay Transfer through Reinsurance
• Have Sufficient Capital to Absorb Losses
How Much Capital Do We Need?
• NAIC Risk-Based Capital • Business Model
Business Model Approach
• Loss Ratio etc. Variability Analysis • DFA/UVS
–
Stochastic Modeling of Gain and Loss (G&L) Over a Period of Time
• Underwriting Cycle Analysis
Model the Impact of Each Risk
Pr ovi der I nsol venci es
R x Tr ends
Ri sk ofLoss
. 050 . 037 . 025 . 012 . 000 0 1000 750 500 250 0 10 20 30 40 50 60 70 80
Loss $m
Capital Sufficiency
• Blue Cross Blue Shield Plans • Multi-state Companies in Multiple States with RBC Requirements • Single-State Companies with RBC Requirements • Single-State Companies without RBC Requirements
– –
NAIC filing of RBC No NAIC filing
Risk Management Practices in the Life Industry
Dave Sandberg, FSA, MAAA Allianz Life
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 26
The GOAL: Convert This
Information Strategic/Tactical • Take Risk • Shed Risk • Avoid Risk
XYZ’s Risk Profile
EXTERNAL
Organization
FINANCIAL STRATEGIC
Operating Decisions & Responses • Prevention • Mitigation • Recovery Results
INTERNAL
HAZARD
OPERATIONAL
Financial Perf. Perf. Measures • Capital Structure • Capital Budgeting • Pricing • Ins./Hedge/Retain
Who manages what risk and how do they relate?
What information and performance measures are used to make decisions?
How are decisions made?
Into an Enhanced Risk Management System
Information
XYZ’s Risk Profile
EXTERNAL
TOP DOWN
Strategic/Tactical • Take Risk • Shed Risk • Avoid Risk
Organization
FINANCIAL STRATEGIC
Operating Decisions & Responses • Prevention • Mitigation • Recovery Results
INTERNAL
HAZARD
OPERATIONAL
Perf. Perf. Measures
BOTTOM UP
Financial • Capital Structure • Capital Budgeting • Pricing • Ins./Hedge/Retain
Diverse Audiences
• • • • •
1. 2. 3. 4.
Policyholders (Mutuals) Regulators – State & Possibly Federal & Banking Shareholders (Public Disclosure Only) Private Investor
5. Foreign Investor, Publicly Traded or Regulated Requirements 6. 7. 8. 9. US Owner, Publicly Traded, Not Insurance Rating agency Self Insured Company Internal Management
• • • •
Diverse Language of Risk Measurement
•
1. Formula Based
» »
NAIC Life Risk Categories of C1-C4 NAIC P&C Risk Categories of R1-R7
• • • •
2. Silo Based (Banking View) – Credit, Liquidity, Market, Legal, OR, Reputational 3. SOA Survey - Assets, Liabilities, A/L, OR, Enterprise 4. Time Horizon – VaR vs. EV 5. Economic Capital - RAROC
Mixture of Owners and Regulators Leads to Diverse Scorecards
•
1.
NAIC RBC Formulas - Meant only to flag weak companies. Not meant to evaluate or rank a “good” company to others or to itself over time 2. Federal Reserve – Credit, Liquidity, Market, Legal, OR, Reputational 3. Life Appointed Actuary - Main Focus is on Interest Rate Risk 4. Foreign Owners - RAROC & Economic Capital 5. Current GAAP Earnings & ROE 6. Sales Growth & Assets Under Management
• • • • •
For the Following Diverse Managers of Co. Risk
• • • • • • • • • •
1.
Appointed Actuary
2. 3. 4. 5. 6. 7. 8. 9.
Pricing Actuary Chief Actuary Chief Underwriter Chief Financial Officer Chief Marketing Officer Chief Risk Officer (If Present) Internal Audit Board of Directors
10. Regulator
Integrated Regulatory Classification Schemes
•
Canada - Office of the Superintendent of Financial Institutions
– – – – – – –
§ § § § § § §
Credit Market Insurance Operational Liquidity Legal And Regulatory Strategic
•
Sweden – Finansinspektionen
– – – –
§ § § §
Credit Risks Market Risks Underwriting Risks (Insurance) Reinsurance Risks (Insurance)
More Integrated Regulatory Classification Schemes
• Sweden – Continued
– – – –
§ § § §
Reserving Risks (Insurance) ALM-Risks (Insurance) Solvency Risks (Insurance) Operational Risks
•
UK – Financial Services Authority
– – – – –
§ § § § §
Credit Market Operational Insurance Group
Understanding The Current Landscape The Good, The Bad & The Ugly
–
A. SOA Finance Practice Survey in 1999 – State of risk position reporting in insurance industry in North America B. SOA Risk Management Task Force C. 2000 Tillinghast survey D. 2001 MMC Survey E. 2001 M&R Survey F. NAIC/Federal Reserve Risk Classification Project G. IAA Solvency Working Party - In Progress
– – – – – –
SOA Finance Practice Survey in 1999 – State of risk position reporting in insurance industry in North America = Measurement & Monitoring, not Management
Objective Develop a better understanding of industry practices in risk position reporting (RPR) Coverage types and depth of RPRs turnaround time and frequency of RPRs who typically receives RPRs what do these reports typically encompass the efficiency (accuracy/ease of collection) of the data collected for these reports how the industry believes these reports will change and evolve
Survey Results
AssetR PR s
D ur at i on The G r eeks Li qui di t y C onvexi t y Val ue atR i sk Per f or m ance M easur e/ At t r i but i on
Li abi l i t y R PR s
Exper i ence St udi es Em bedded Val ue and Var i ance Anal ysi s D et er mi ni st i c & St ochast i c Scenar i o Test i ng Mi sm at ch R i sk ( e. g.dur at i on,convexi t y,l i qui di t y) Tr ansf erPr i ci ng Em pi r i calEval uat i on R egr essi on Anal ysi s I nf l uence D i agr am s and t he D el phiM et hod
Asset / l i abi l i t y R PR s
O per at i onalR PR s
RESULTS BEING COMMUNICATED VIA:
•Article submitted to the NAAJ •Complete results posted to the SOA website with a covering index (flyer in The Actuary) •Magazine articles in Contingencies, Risks & Rewards and Best’s Review
Questions of Interest to SOA Risk Management Task Force - To Both Educate & Further Research
• 1. RBC covariance and correlation • 2. Policyholder behavior in extreme situations • 3. Extreme value models • 4. Modeling techniques relating to adequacy of scenarios to be tested • 5. Risk management & Shareholder value • 6. Pricing for risk • 7. Equity risk quantification
2000 Tillinghast Survey “Enterprise Risk Management in the Insurance Industry: 2000 Benchmarking Survey Report
Results from 66 insurance industry chief financial officers, chief actuaries and chief risk officers in major markets worldwide Geography: 60% North America, 40% rest of world Company structure: stock, mutual, other Type of operations: life insurance, property/casualty insurance, mutual funds, banking Company size: $25 million to $10 billion in direct written premiums For the European ALM survey, results from 46 life insurance companies in 7 countries Supplemented with in-depth interviews/company visits
Tillinghast Key findings
• Very few companies have a chief risk officer (CRO), although the position is much more prevalent outside of North America • Companies recognize the importance of integrating risk into their company’s strategic, operational and financial planning, but not all do so because of:
Tools – Organizational turf – Processes – Time
–
• Most companies include operational risk in the internal audit plan, but far fewer include financial risk
Continued . . .
Other key findings - Tillinghast
• Less than half of respondents are factoring interactions among risk sources into their:
Assessment/measurement of risks – Determination of diversification benefit – Mitigation/financing strategies
–
• There is a high level of dissatisfaction with respect to:
– – – – –
Stochastically modeling the important risks Including operational risk in determining economic capital Prioritizing disparate risks using a common metric Optimizing financial and operational strategies in light of risk/reward requirements Coordinating all these activities within a coherent framework
MMC EIU Study - Key Findings
? ERM is being adopted widely: 41% of companies are implementing ERM (53% in Europe, 34% in North America, 33% in Asia) ? Companies using ERM are more confident in their ability to manage risk: Of those using ERM, 90% reported being very confident, compared with just 45% of those not using ERM ? Firms adopt ERM for a wide range of reasons ? Companies believe ERM can improve their P/E ratio and cost of capital: 84% of companies reported a link between ERM and these metrics ? Executives believe that communicating their ERM activities to investors can be beneficial: 50% of respondents at public companies say they have much to gain by advertising their efforts to the investment community ? Non-traditional risks pose the greatest threat: Top three were customer loyalty, competitive threats and operational failure
EIU Study - Key Findings
? ERM requires structural and cultural change ? Few companies measure the integrated effects of risk across the entire organization: Only 15% of companies aggregate risks across their organization. Many have started with financial risks. Integration will spread to operational risks next. ? Current quantification methods are inadequate for intangible risks: 53% report this as an obstacle to ERM. ? There is no single approach to ERM
MMC EIU Study - ERM, why now?
? Outsiders are pushing companies to manage risk more comprehensively and systematically ? Investors are becoming more sensitive to any deviation from earnings estimates, encouraging companies to address earnings volatility ? Shareholders are increasingly holding boards of directors and senior executives to higher accountability standards ? The continuing convergence of the traditional capital and insurance markets is yielding innovative approaches to managing emerging risks ? Many companies perceive a rise in the number and severity of the risks they face
What are companies hoping to get from ERM?
Common understanding of risk across functions and business units Better understanding of risk for competitive advantage Safeguard against earnings-related surprises Ability to respond effectively to low-probability critical/catast risks Cost savings through better management of internal resources More efficient capital allocation Ability to avoid low-probability critical/catastrophic risks Ability to identify aggregating and/or offsetting risk patterns Better regulatory compliance Improvement in company's P/E ratio Cost savings through reductions in hedging and insurance costs Ability to compensate management based on risk-adjusted returns
0
Source: EIU survey 2001
10
20
30
40
50
60
70
% responding “important” or “highly important”
What are regulators hoping to get from ERM?
?
Moving on to Management of Risk
–
A. Risk Reduction - Reduce Sales, Stricter U/Wing, Redesign Product(Sept 11),Improve Operating Practices(Claim Infor/causes),training B. Risk Integration – ALM – Manage risk by buying assets to match liability to acceptable risk tolerance level - + Buy reinsurance C. Risk Diversification – Multiple Product Lines, Broader geographic area D. Risk Hedging- Natural or introduce counterparty risk E. Risk Transfer – Sell, Securitize, Reinsure to reduce volatility F. Risk Disclosure -???? To be Continued
–
–
– –
–
Risk Disclosure
– –
A. One of Three Proposed Pillars in Basel 2 for Banks B. Nature of Disclosure is Unclear - Three sample approaches
• • •
1. Public via 10K/Q. Would overwhelm reader with assumptions 2. Regulator via confidential process (banking) 3. Prospective looking balance sheet with public disclosure of actual to expected variances (Schedual H & O in Blue Book)
–
C. Life Insurance is only Balance sheet where 99% of the reserves (the major liability risk item) include no indication of what the company actually believes about the listed future obligations other than that they are adequate.
Risk Management in the Insurance Industry
For further information regarding this presentation please contact Meredith Detweiler, Financial Reporting Policy Analyst with the American Academy of Actuaries at [email protected] or at 202-223-8196
Risk Management in the Insurance Industry
December 2001 NAIC Meeting Session 7a Sunday, December 9, 2001
Copyright © 2001 by the American Academy of Actuaries. NAIC December 2001 51
doc_934775417.pdf