Enterprise Risk Management and Capital Management
ERM framework
ERM identifies, assesses, prioritizes, and manages risks across the enterprise. The COSO framework organizes this around governance and culture, strategy and objective-setting, performance, review and revision, and information, communication, and reporting. Risk categories for insurers include underwriting, reserve, credit, market, liquidity, operational, strategic, reputational, and catastrophe risk. A frequent trap is treating ERM as a compliance exercise rather than a decision tool; questions reward integration with strategy and capital allocation.
Risk appetite and tolerance
Risk appetite is the amount and type of risk the board is willing to accept; tolerance sets boundaries; limits operationalize them. Risk registers, heat maps, and scenario analysis support assessment. Key risk indicators provide early warning. Own-risk-and-solvency-assessment style processes connect risk profile to capital.
Capital management
Economic capital is the amount needed to absorb unexpected losses at a chosen confidence level; regulatory capital (RBC) is the minimum standard; rating agency capital is a market expectation. RBC ratios compare total adjusted capital to authorized control level capital, with action levels triggering regulatory intervention. Diversification reduces required capital because risks are not perfectly correlated. Catastrophe models, reinsurance, and capital markets (cat bonds) are risk-transfer and capital tools.
Worked example
An insurer holds $120M of total adjusted capital against a $60M authorized control level-an RBC ratio of 200%, comfortably above company action level. Rule of thumb: RBC ratio = total adjusted capital / authorized control level capital; know that 200% is the company action level threshold and that lower ratios trigger escalating regulatory responses.