the orsa process: where do i start this circle? a ... · times and are sufficient to achieve its...

36
The ORSA process: where do I start this circle? A practical ORSA application Jaco van der Merwe & Maree Lambrechts 11 August 2014

Upload: others

Post on 04-Oct-2020

0 views

Category:

Documents


0 download

TRANSCRIPT

The ORSA process: where

do I start this circle?

A practical ORSA applicationJaco van der Merwe & Maree Lambrechts

11 August 2014

Introduction 3

The ORSA process 5

Considering business as usual 8

The ideal ORSA process 26

Conclusion 29

Contents

2 © 2014 Deloitte Touche Tohmatsu Limited

A practical application of the ORSA in a South African environment:

• Moving away from the theoretical to the practical

• Practical elements of having a sufficiently rigorous ORSA in place

• Case study: Insurer X

• Finding the ORSA ‘efficient frontier’

• Potential further ORSA developments in the business

Introduction

What do we want to achieve today?

3 © 2014 Deloitte Touche Tohmatsu Limited

The ORSA Process

The ORSA process in South Africa

• Current available regulatory guidance & principles

• Output requirements of the ORSA process

• How the ORSA assists me in running a best practice ST insurer

− Why complicate my current systems further?

− Where is my efficient frontier?

• Ok, so how do we meet these requirements practically?

The ORSA process

Overview

5 © 2014 Deloitte Touche Tohmatsu Limited

“The ORSA is the entirety of processes and procedures employed to identify,

assess, monitor, manage & report the short and long term risks...to determine

the own funds necessary to ensure that...overall solvency needs are met at all

times and are sufficient to achieve its business strategy”

The ORSA process

Common ORSA structures/themes

6 © 2014 Deloitte Touche Tohmatsu Limited

Considering current

business as usual

The current ERM frameworkCurrent industry risk management capabilities

8 © 2014 Deloitte Touche Tohmatsu Limited

Risk Management ORSA Control Functions

Strong

Acceptable

Needs Improvement

Weak

45%

46%

9%

51%

14%

2%

33%

51%

6%

43%

1%

16% 57%54%

Introducing Insurer X

Introducing Insurer X

Overview

• Short term insurer in South Africa

• Only participates in local market

• Established for almost 10 years now

• Broker-based business

• Risk management capabilities have only been developed

recently

• CRO position has been filled for 1.5 years now

• No existing ORSA process in place

• Financial year-end is 30 June

10 © 2014 Deloitte Touche Tohmatsu Limited

Introducing Insurer X

Current ERM capabilities

• Business strategy in place for the next

5 years, reviewed annually

• No clearly articulated risk strategy

• High level risk appetite in place, no

clear risk limits

• Risk identification & assessment

processes are pretty basic

• Stress testing not explicitly part of risk

processes

• Capital assessment based on

Standard Formula

• No current risk projections

11 © 2014 Deloitte Touche Tohmatsu Limited

BusinessStrategy

Risk Strategy

Risk Appetite

RiskIdentification

RiskAssessment

Stress TestingCapital

Assessment

SolvencyProjections

ComplianceMonitoring

Governance

ORSA in thebusiness

Introducing Insurer X

ORSA strategy

• Objective is an efficient, practical & implementable ORSA that adds value

• ORSA structure/themes definition is starting point

• Identification of development areas

• Panel-beat these to fit regulatory guidance & principles

• Finalise processes to meet regulatory compliance by end of 2014

• Management training end 2014

• Finalise ORSA Record & Report structure by 1st quarter 2015

• Final management training 1st quarter 2015

• Operational optimisation during 2nd quarter 2015

• Annual ORSA in 3rd quarter 2015

12 © 2014 Deloitte Touche Tohmatsu Limited

The current ERM framework

Taking a calendar view

13 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

???

Consolidating Insurer X’s

ERM Framework

The current ERM framework

Taking a calendar view

15 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

Process outputs ► into ORSA Record

ORSA outputs ► into core processes

The ORSA Record

The current ERM framework

Business Strategy

16 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• Business Strategy set over 5 years

• Strategy doesn’t incorporate risk budgeting

• Business Strategy currently orphaned from risk

management structure and processes in place

Current Situation

The current ERM framework

Business Strategy

17 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• Business Strategy set over 5 years

• Strategy doesn’t incorporate risk budgeting

• Business Strategy currently orphaned from risk

management structure and processes in place

Current Situation

• Business Strategy to be incorporated into risk

processes & vice versa

• ORSA Report to contain short overview of current

business strategy, incorporation of risk assessment

Process Adjustments

The current ERM framework

Risk Strategy & Appetite

18 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• No clearly articulated Risk Strategy

• High level Risk Appetite statement in place

• No clear risk metrics captured in risk appetite

• Risk Appetite statement is static

• No clear, regular review process in place

Current Situation

The current ERM framework

Risk Strategy & Appetite

19 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• Need to clearly articulate Risk Strategy

• Risk appetite needs clear risk metrics in place

• Need to ensure risk framework is projected over the

business planning horizon

• Rigorous review process put in place

Process Adjustments

The current ERM frameworkRisk Identification & Assessment

20 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

• Basic Risk Identification processes

• Basic Risk Assessment processes

• Quarterly reporting on risk to Risk Committee

Current Situation

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

The current ERM frameworkRisk Identification & Assessment

21 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• No major adjustments necessary

• Proportional risk identification & assessment

procedures

• Ensure individual risk policies in place

• Ensure above policies clearly articulate the

identification and assessment processes in place

Process Adjustments

The current ERM framework

Stress Testing

22 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• No explicit process in place for stress testing and

scenario analysis

• Business planning doesn’t incorporate stress

testing

• Regulatory capital & economic capital models in

place

Current Situation

The current ERM framework

Stress Testing

23 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• Need explicit stress testing & scenario analysis

policy

• Need to develop policy into framework, embed in

decision-making

• Document results clearly

• Establish roles & responsibilities to ensure

accountability

Process Adjustments

The current ERM frameworkCapital Assessment & Solvency

Projections

24 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

• Regulatory capital based on standard formula

• Simple economic capital model in place

• No projection of risk exposures

• No consideration of risk as part of business strategy

Current Situation

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

The current ERM framework

25 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• Incorporate capital & solvency assessments into

strategic planning process

• Incorporate areas of business that will influence

future capital position, e.g. reinsurance renewals,

rating renewals

• Ensure stress testing is done on capital & solvency

projections

• Conduct own funds analysis as part of strategic

planning process

Process Adjustments

Capital Assessment & Solvency

Projections

The current ERM framework

Governance

26 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

• Board Risk Committee in place

• Quarterly Risk Reporting

• Risk escalation processes in place

• Chief Risk Officer in place

Current Situation

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

The current ERM framework

Governance

27 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• No explicit adjustments required to governance

process

• Clearly articulate governance process in ORSA

Report

Process Adjustments

The current ERM framework

ORSA in the business

28 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• No feedback of ORSA results currently into

business

• Decision-making doesn’t incorporate ORSA

results

• Strategic planning process doesn’t incorporate

ORSA results

Current Situation

The current ERM framework

ORSA in the business

29 © 2014 Deloitte Touche Tohmatsu Limited

Core structures

Audit & Risk Committees

Investment Committee

Board

Core processes

Quarterly risk reporting

Actuarial valuation

Reinsurance renewal

Rating reviews

Strategic planning

The ORSA Process

Business Strategy

Risk Strategy

Risk Appetite

Identification & Assessment

Stress Testing

Capital Assessment

Solvency Projections

Governance

ORSA in the business

Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec

• Ensure clear feedback mechanism from ORSA

report creation into decision-making processes

• ORSA results should feed into all Board

meetings

• ORSA results should feed into all Risk

Committee meetings

Process Adjustments

The current ERM framework

Compliance conclusion – ok so what now?

• Current ORSA process in place

• Independent validation

• Board & Senior Management Training

• Documentation structure

• Which areas are subject to further development?

30 © 2014 Deloitte Touche Tohmatsu Limited

“The world is getting to be such a dangerous

place, a man is lucky to get out of it alive.”

W.C. Fields

The ideal ORSA process

The ideal ORSA process

Structure overview

• Regulatory compliance has been

addressed

• Entirety of risk management

processes and procedures are

sufficient in the eyes of the

regulator

• What about internal view?

• Where does this process fit into

our competitive advantage

• Which areas are subject to further

development?

32 © 2014 Deloitte Touche Tohmatsu Limited

Business Strategy

Risk Strategy

Risk Appetite

Risk Identification

Risk Assessment

Stress TestingCapital Assessment

SolvencyProjections

ComplianceMonitoring

Governance

ORSA in thebusiness

Insurer X FSB

The ideal ORSA process

The “efficient frontier”

33 © 2014 Deloitte Touche Tohmatsu Limited

Various Considerations:

• Business nature

• Size

• Scale

• Resources

• Where will processes

add further value?

????

Conclusion

The ORSA process in South Africa

• Many of the building blocks already in place

• Leveraging these will facilitate initial implementation of ORSA

• All ORSA requirements will however likely not be met by current processes

• Continuous road to ERM improvement, ORSA principles light this road

Conclusion

The ORSA Process

35 © 2014 Deloitte Touche Tohmatsu Limited

Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of

which is a legally separate and independent entity. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche

Tohmatsu Limited and its member firms.

Deloitte provides audit, tax, consulting and financial advisory services to public and private clients spanning multiple industries. With a globally connected

network of member firms in more than 150 countries, Deloitte brings world-class capabilities and high-quality service to clients, delivering the insights they

need to address their most complex business challenges. The more than 200 000 professionals of Deloitte are committed to becoming the standard of

excellence.

This communication contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively,

the “Deloitte Network”) is, by means of this communication, rendering professional advice or services. No entity in the Deloitte Network shall be responsible for

any loss whatsoever sustained by any person who relies on this communication.

© 2014 Deloitte & Touche. All rights reserved. Member of Deloitte Touche Tohmatsu Limited

Jaco van der Merwe

Director FASSA FFA

Deloitte & Touche

Actuarial & Insurance Solutions

[email protected]

Maree Lambrechts

Actuarial Analyst

Deloitte & Touche

Actuarial & Insurance Solutions

Questions?