risk appetite – what the ceo and board should be doing€¦ · source: risk appetite. the...

25
Risk Appetite – What the CEO and Board should be doing Ian Laughlin APRA Member NETWORKING 25 July 2011

Upload: others

Post on 17-Aug-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Risk Appetite – What the CEO and Board should be doing

Ian LaughlinAPRA Member

NETWORKING

25 July 2011

Page 2: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Today

• Recent History • What is it?• Whose is it? • Articulation, Translation, Co-ordination

etc• Consistency with Plans• APRA’s Requirements • Assessment of RA Statements• How Actuaries Can Help

2

Page 3: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Bad luck? Appetite Unclear?

Appetite > Capacity? Risk > Appetite?

• Westpoint, ACR, MFS, City Pacific …• Opes Prime• Tricom• Centro• Allco • Babcock and Brown• NAB (CDOs), ANZ (Opes), RAMS, • AMI (NZ)

3

• Bear Stearns, Lehman Bros … • Credit Agricole• Northern Rock, RBS, …• Irish Banks• Icelandic Banks• AIG • MBIA • UBS• Fannie Mae, Freddie Mac

Page 4: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

4

Useful references

• Risk appetite - The strategic balancing act – Ernst & Young 2010• Risk appetite – How hungry are you? – PWC• What’s your risk appetite – Oliver Wyman 2008• Understanding and articulating risk appetite – KPMG 2008• Risk Appetite - Society of Actuaries Webinar 2011 – Kent Griffin• Risk Appetite - Bennet and Cusick 2007• Implementing Robust Risk Appetite Frameworks to Strengthen

Financial Institutions – Institute of International Finance June 2011• Strengthening the board-management dialogue on risk and

strategy – Tapestry Networks 2010

Page 5: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Source: Risk appetite. The strategic balancing act. Ernst & Young 2010 5

Risk capacity: the amount and type of risk an organization is able to support in pursuit of its business objectives.

Risk appetite: the amount and type of risk an organization is willing to accept in pursuit of its business objectives.

Risk tolerance: the specific maximum risk that an organization is willing to take regarding each relevant risk.

Risk target: the optimal level of risk that an organization wants to take in pursuit of a specific business goal.

What is it?

Page 6: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Whose appetite is it anyway?

• Shareholders focus is usually here

6

Page 7: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Whose appetite is it anyway?

• Shareholders focus is usually here• Customers but needed here too

e.g. – Lifeco Par Policy-holders– Debenture-holders– Depositors

7

Page 8: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Articulation: Risk Appetite

Qualitative

Quantitative

“conservative”; “aggressively pursue opportunities ..”“low appetite for risk except if directly related to core skills”“we have no appetite for systematicoperational risk”“not tolerate damage to reputation”

“less than a 10% chance of a loss each year”“less than x% chance of a breach of PCR in next 2 years”“maintain S&P rating of AA”“no more than X% decline in embedded value with 95% prob.”“a negative return once in about every 7 years”

8

“considerable appetite for new ventures”“we have a war chest for …”“guaranteed”“backed by first mortgages”“low risk”“speculative”“aggressive”

Page 9: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Articulation: Risk Tolerance

“return on economic capital of no less than x% over 3 years”“system downtime no more than …”“no more than xx complaints each year”;“expenses not to exceed budget by more than xx%”“fraud less than yy% of total claims”“counterparty credit rating no less than B”“we will not tolerate fraud or illegal activity by staff”“we have no tolerance for discrimination”“unit pricing rectification no more than $Y”“individual claim exposure of no more than $X”“credit losses of no more than $Z”“VAR of no more than …”

9

Page 10: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Translation

CompanyAppetite(Quant/Qual)

Tolerance(quant)

10

Bus. UnitRisk by Type

Page 11: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Coordination

11

Appetite(Quant/Qual)

Tolerance(quant)

Company

Bus. UnitRisk by Type

Page 12: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Monitoring & Corrective Action

12

Company

Bus. UnitRisk by Type

Tolerance(quant)

Appetite(Quant/Qual)

Page 13: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

All this is difficult to do well

• Articulation• Translation and quantification• Co-ordination• Monitoring & Corrective Action

13

Page 14: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

APRA’s Requirements (LPS/GPS 220)

• Risk Management Framework

• Risk Management Strategy• Risk Appetite

Board Responsibility

14

Page 15: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

RA and Capital Management

15

Page 16: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Assessment of Risk Appetite Statements

Draft Guidelines for APRA Supervisors

16

Page 17: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

RA GUIDE FOR SUPERVISORS - GOVERNANCE

• Board engaged in the development of the RA

• RA considers the interests & expectations of all relevant stakeholders.

• RA is periodically reviewed in the context of the economic conditions and competitive environment.

• There is a feedback loop to Board

• Board satisfied that risk tolerances & limits are understood & applied as intended.

• The RA seems reasonable, makes sense.

• Within group structures a) a group RAS; and b) a RAS for each entity which is consistent with the group RAS.

17

Page 18: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

RA GUIDE FOR SUPERVISORS - RISK MANAGEMENT

18

• The RA considers the material types of risks.

• The RA statement is core to the risk management framework and sets clear boundaries and expectations.

• The RA is supported by tolerances and limits, which are embedded in the business.

• The RA is considered when assessing the adequacy of controls in mitigating risks.

Page 19: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

RA GUIDE FOR SUPERVISORS - IMPLEMENTATION

• The entity’s strategic objectives and business plans are consistent with the RA.

• The entity’s capital management plan is consistent with the RA; and capital levels and targets are monitored and reported against the RA.

• The risks necessary to produce required returns on capital are within the RA.

19

Page 20: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

RA GUIDE FOR SUPERVISORS - COMMUNICATION

• The board regularly receives reporting on the entity’s level of risk relative to its RA.

• Scenario analysis and stress testing are performed against the RA and reported to the board.

• Communication of the entity’s RA and/or its derived tolerances and limits to each part of the entity’s operations.

20

Page 21: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Discussion

21

Page 22: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Actuaries can help CEOs and Boards

• Articulation• Translation/quant• Co-ordination• Monitoring & Corrective

Action

22

Page 23: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Actuaries can help CEOs and Boards

• Articulation• Translation/quant• Co-ordination• Monitoring & Corrective

Action

23

• Remuneration and RA• ICAAP and RA• Stress testing and RA

Page 24: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Summary

• Risk Appetite is foundation of sound risk management

• It is difficult, but critical, to:– Clearly articulate RA– Translate RA into risk tolerances – Co-ordinate risk positions by type and BU– Monitor risk and take corrective action

• APRA is increasing its intensity of RA supervision

• Actuaries can help CEOs and Boards

24

Page 25: Risk Appetite – What the CEO and Board should be doing€¦ · Source: Risk appetite. The strategic balancing act. Ernst & Young 2010. 5. Risk capacity: the amount and type of risk

Discussion

25