the orsa process: where do i start this circle? a ... · times and are sufficient to achieve its...
TRANSCRIPT
The ORSA process: where
do I start this circle?
A practical ORSA applicationJaco van der Merwe & Maree Lambrechts
11 August 2014
Introduction 3
The ORSA process 5
Considering business as usual 8
The ideal ORSA process 26
Conclusion 29
Contents
2 © 2014 Deloitte Touche Tohmatsu Limited
A practical application of the ORSA in a South African environment:
• Moving away from the theoretical to the practical
• Practical elements of having a sufficiently rigorous ORSA in place
• Case study: Insurer X
• Finding the ORSA ‘efficient frontier’
• Potential further ORSA developments in the business
Introduction
What do we want to achieve today?
3 © 2014 Deloitte Touche Tohmatsu Limited
The ORSA process in South Africa
• Current available regulatory guidance & principles
• Output requirements of the ORSA process
• How the ORSA assists me in running a best practice ST insurer
− Why complicate my current systems further?
− Where is my efficient frontier?
• Ok, so how do we meet these requirements practically?
The ORSA process
Overview
5 © 2014 Deloitte Touche Tohmatsu Limited
“The ORSA is the entirety of processes and procedures employed to identify,
assess, monitor, manage & report the short and long term risks...to determine
the own funds necessary to ensure that...overall solvency needs are met at all
times and are sufficient to achieve its business strategy”
The current ERM frameworkCurrent industry risk management capabilities
8 © 2014 Deloitte Touche Tohmatsu Limited
Risk Management ORSA Control Functions
Strong
Acceptable
Needs Improvement
Weak
45%
46%
9%
51%
14%
2%
33%
51%
6%
43%
1%
16% 57%54%
Introducing Insurer X
Overview
• Short term insurer in South Africa
• Only participates in local market
• Established for almost 10 years now
• Broker-based business
• Risk management capabilities have only been developed
recently
• CRO position has been filled for 1.5 years now
• No existing ORSA process in place
• Financial year-end is 30 June
10 © 2014 Deloitte Touche Tohmatsu Limited
Introducing Insurer X
Current ERM capabilities
• Business strategy in place for the next
5 years, reviewed annually
• No clearly articulated risk strategy
• High level risk appetite in place, no
clear risk limits
• Risk identification & assessment
processes are pretty basic
• Stress testing not explicitly part of risk
processes
• Capital assessment based on
Standard Formula
• No current risk projections
11 © 2014 Deloitte Touche Tohmatsu Limited
BusinessStrategy
Risk Strategy
Risk Appetite
RiskIdentification
RiskAssessment
Stress TestingCapital
Assessment
SolvencyProjections
ComplianceMonitoring
Governance
ORSA in thebusiness
Introducing Insurer X
ORSA strategy
• Objective is an efficient, practical & implementable ORSA that adds value
• ORSA structure/themes definition is starting point
• Identification of development areas
• Panel-beat these to fit regulatory guidance & principles
• Finalise processes to meet regulatory compliance by end of 2014
• Management training end 2014
• Finalise ORSA Record & Report structure by 1st quarter 2015
• Final management training 1st quarter 2015
• Operational optimisation during 2nd quarter 2015
• Annual ORSA in 3rd quarter 2015
12 © 2014 Deloitte Touche Tohmatsu Limited
The current ERM framework
Taking a calendar view
13 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
???
The current ERM framework
Taking a calendar view
15 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
Process outputs ► into ORSA Record
ORSA outputs ► into core processes
The ORSA Record
The current ERM framework
Business Strategy
16 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• Business Strategy set over 5 years
• Strategy doesn’t incorporate risk budgeting
• Business Strategy currently orphaned from risk
management structure and processes in place
Current Situation
The current ERM framework
Business Strategy
17 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• Business Strategy set over 5 years
• Strategy doesn’t incorporate risk budgeting
• Business Strategy currently orphaned from risk
management structure and processes in place
Current Situation
• Business Strategy to be incorporated into risk
processes & vice versa
• ORSA Report to contain short overview of current
business strategy, incorporation of risk assessment
Process Adjustments
The current ERM framework
Risk Strategy & Appetite
18 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• No clearly articulated Risk Strategy
• High level Risk Appetite statement in place
• No clear risk metrics captured in risk appetite
• Risk Appetite statement is static
• No clear, regular review process in place
Current Situation
The current ERM framework
Risk Strategy & Appetite
19 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• Need to clearly articulate Risk Strategy
• Risk appetite needs clear risk metrics in place
• Need to ensure risk framework is projected over the
business planning horizon
• Rigorous review process put in place
Process Adjustments
The current ERM frameworkRisk Identification & Assessment
20 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
• Basic Risk Identification processes
• Basic Risk Assessment processes
• Quarterly reporting on risk to Risk Committee
Current Situation
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
The current ERM frameworkRisk Identification & Assessment
21 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• No major adjustments necessary
• Proportional risk identification & assessment
procedures
• Ensure individual risk policies in place
• Ensure above policies clearly articulate the
identification and assessment processes in place
Process Adjustments
The current ERM framework
Stress Testing
22 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• No explicit process in place for stress testing and
scenario analysis
• Business planning doesn’t incorporate stress
testing
• Regulatory capital & economic capital models in
place
Current Situation
The current ERM framework
Stress Testing
23 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• Need explicit stress testing & scenario analysis
policy
• Need to develop policy into framework, embed in
decision-making
• Document results clearly
• Establish roles & responsibilities to ensure
accountability
Process Adjustments
The current ERM frameworkCapital Assessment & Solvency
Projections
24 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
• Regulatory capital based on standard formula
• Simple economic capital model in place
• No projection of risk exposures
• No consideration of risk as part of business strategy
Current Situation
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
The current ERM framework
25 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• Incorporate capital & solvency assessments into
strategic planning process
• Incorporate areas of business that will influence
future capital position, e.g. reinsurance renewals,
rating renewals
• Ensure stress testing is done on capital & solvency
projections
• Conduct own funds analysis as part of strategic
planning process
Process Adjustments
Capital Assessment & Solvency
Projections
The current ERM framework
Governance
26 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
• Board Risk Committee in place
• Quarterly Risk Reporting
• Risk escalation processes in place
• Chief Risk Officer in place
Current Situation
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
The current ERM framework
Governance
27 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• No explicit adjustments required to governance
process
• Clearly articulate governance process in ORSA
Report
Process Adjustments
The current ERM framework
ORSA in the business
28 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• No feedback of ORSA results currently into
business
• Decision-making doesn’t incorporate ORSA
results
• Strategic planning process doesn’t incorporate
ORSA results
Current Situation
The current ERM framework
ORSA in the business
29 © 2014 Deloitte Touche Tohmatsu Limited
Core structures
Audit & Risk Committees
Investment Committee
Board
Core processes
Quarterly risk reporting
Actuarial valuation
Reinsurance renewal
Rating reviews
Strategic planning
The ORSA Process
Business Strategy
Risk Strategy
Risk Appetite
Identification & Assessment
Stress Testing
Capital Assessment
Solvency Projections
Governance
ORSA in the business
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec
• Ensure clear feedback mechanism from ORSA
report creation into decision-making processes
• ORSA results should feed into all Board
meetings
• ORSA results should feed into all Risk
Committee meetings
Process Adjustments
The current ERM framework
Compliance conclusion – ok so what now?
• Current ORSA process in place
• Independent validation
• Board & Senior Management Training
• Documentation structure
• Which areas are subject to further development?
30 © 2014 Deloitte Touche Tohmatsu Limited
“The world is getting to be such a dangerous
place, a man is lucky to get out of it alive.”
W.C. Fields
The ideal ORSA process
Structure overview
• Regulatory compliance has been
addressed
• Entirety of risk management
processes and procedures are
sufficient in the eyes of the
regulator
• What about internal view?
• Where does this process fit into
our competitive advantage
• Which areas are subject to further
development?
32 © 2014 Deloitte Touche Tohmatsu Limited
Business Strategy
Risk Strategy
Risk Appetite
Risk Identification
Risk Assessment
Stress TestingCapital Assessment
SolvencyProjections
ComplianceMonitoring
Governance
ORSA in thebusiness
Insurer X FSB
The ideal ORSA process
The “efficient frontier”
33 © 2014 Deloitte Touche Tohmatsu Limited
Various Considerations:
• Business nature
• Size
• Scale
• Resources
• Where will processes
add further value?
????
The ORSA process in South Africa
• Many of the building blocks already in place
• Leveraging these will facilitate initial implementation of ORSA
• All ORSA requirements will however likely not be met by current processes
• Continuous road to ERM improvement, ORSA principles light this road
Conclusion
The ORSA Process
35 © 2014 Deloitte Touche Tohmatsu Limited
Deloitte refers to one or more of Deloitte Touche Tohmatsu Limited, a UK private company limited by guarantee, and its network of member firms, each of
which is a legally separate and independent entity. Please see www.deloitte.com/about for a detailed description of the legal structure of Deloitte Touche
Tohmatsu Limited and its member firms.
Deloitte provides audit, tax, consulting and financial advisory services to public and private clients spanning multiple industries. With a globally connected
network of member firms in more than 150 countries, Deloitte brings world-class capabilities and high-quality service to clients, delivering the insights they
need to address their most complex business challenges. The more than 200 000 professionals of Deloitte are committed to becoming the standard of
excellence.
This communication contains general information only, and none of Deloitte Touche Tohmatsu Limited, its member firms, or their related entities (collectively,
the “Deloitte Network”) is, by means of this communication, rendering professional advice or services. No entity in the Deloitte Network shall be responsible for
any loss whatsoever sustained by any person who relies on this communication.
© 2014 Deloitte & Touche. All rights reserved. Member of Deloitte Touche Tohmatsu Limited
Jaco van der Merwe
Director FASSA FFA
Deloitte & Touche
Actuarial & Insurance Solutions
Maree Lambrechts
Actuarial Analyst
Deloitte & Touche
Actuarial & Insurance Solutions
Questions?