Aon Benfield's CRO guide to Solvency II - in case you're not ready yet...

For all those CROs who are about to get left holding the Solvency II baby three years early by their over-enthusiastic executive colleagues, Aon Benfield pulled together a CRO guide to Solvency II which aims to take the journey "from complexity to best practice". 10 out of 10 for ambition...

It leans heavily towards General Insurers/Reinsurers (indeed it reads like a reinsurance sales brochure in many parts!), but nevertheless contains a suite of very useful content for anyone in the Risk space, as well as attempting to shatter a few myths. I took the following from it;

• Steady early bits on capital planning and common questions a CRO should be posing in that space
• On page 5, an excellent table comparing standard formula against internal modelling by risk driver, in particular emphasising why internal modelling may be more appropriate, rather than how much capital it could shave off. Being able to explain to the national regulator why one has neglected to apply the enhancements that internal modelling introduces to the accuracy of one's quantitative risk profile would be a smart thing for CROs to practice!
• The undo some of that noble work by suggesting part of any IM feasibility study should include estimating the capital benefits!
• Nice examples at the top of p6 of what mixes of business lend themselves to benefitting from an IM approach
• Highlighting that domicile of firm continues to dictate feasibility of IMs for smaller firms (i.e some countries can't staff it!).
• Recommend reviewing SF SCR factoring in the draft L2 asap. As was clear from the E&Y research I covered yesterday, many firms across the EU consider themselves to be advanced in the Pillar 1 space while disregarding draft L2. They highlight the Swiss experience as one where they struggled to authorise models for "Day 1" approval, and the Aon crowd propose some meaningful contingencies on p8
• Useful analysis of capital drivers and optimisation strategies (p9-10)
• Section on expert judgement validation (p15), touching on the Level 3 expectations, and in particular how a (non-Actuarial) CRO may struggle to adequately challenge certain judgement calls, such as selected data series or correlation matrices, without specialist advice. Very hard for smaller firms to obtain that, as most of their actuarial function will have probably contributed to the judgement!
• Note that one of the key challenges for documenting the IM is getting the best-placed people (who are normally swimming in BAU) to pick up a pen and write!
• Neat section on ORSA (p27-29), emphasising that SF firms with complex risk profiles may find they struggle to justify that approach when concluding the assessment. They go on to suggest that early experiences of ORSA Report/process documentation submissions have left CROs feeling that the regulatory approach is (Level 3?) tickbox as to content expectations.
• Key challenges for CRO in briefing and educating senior colleagues for Solvency II-readiness are all fair, in particular the gap that could emerge if a CRO is not also an executive member.
• The section on Risk Appetite is particularly useful for smaller non-IMAP firms, who may struggle to quantify their target measures - whether using Standard Deviations/volatility measures as suggested is a touch too simple depends on the business I guess.
• The Pillar 3 section hits on the same issues I (and the FSA!)have picked up on earlier, such as end-user computing, inability to transition to BAU, data ownership issues etc.

I did take exception to a couple of bits in here, where the industry or indeed common sense appears to suggest otherwise;

• The "fallacy" outlined on p5 that an IM enables a firm to hold less capital than an SF equivalent. The research I pointed to yesterday (p20) suggests across the EU that modellers are already "making it rain" with their capital savings
• That the IM alternative for Op Risk is based on ORIC and individual loss event info. I'd certainly seen Milliman suggest that this approach is as flimsy as the SF approach, recommending options such as Bayesian networks to generate IM inputs.
• Concerns that evidencing senior management model "use" could create a "value-destroying documentation burden". Is that what we call "minutes" these days!
• Comments around the documentation delivery for the Internal Model Application Process becoming detached from the underlying processes referenced in those docs influencing BAU value-adding activity are perfectly valid, but no real solution is proposed.
• The operation of the Model Change Policy features heavily (p19-21), as anyone in that space would expect. Again. little offered in the way of solutions, but I certainly would have expected more discussion on the "scope" of the model, which in my experience is a solid, liquid or gas depending on which control function you speak to, and I'm sure the FSA would agree!

PS All the best to you guys on the US East Coast, let's hope the worst has passed...

Ernst and Young European Solvency II survey - the storm before the calm...

So Ernst and Young have decided to join the party with one of the more noble attempts to gather EU-wide industry opinion on progress towards Solvency II compliance, and kindly published those findings recently. Yes, I understand that this survey came out over a week ago, but I left my notes in the Isle of Man last Monday, and I'm not so enthusiastic that I fancied another turbo-prop into Ronaldsway Airport to 'go fetch'.

There was naturally plenty of media comment on its content (here, here and here for a start, but I'm sure you can do better), but bearing in mind it was released with a backdrop of 2015/2016 and the moveable feast that is UK IMAP, one could be forgiven for not caring less about the results that point to preparedness 'by 2014'. However, the E&Y guys obviously stayed up all night to do it, so I gave it the once-over and noted the following;

Sample - 160+ respondents from 19 countries, about as volumous as I have come across, though clearly weighted towards medium/large firms (€100m+ premium income per annum), and what we might call "old" Europe.

General

• 90% reckoned they could be compliant by 2015 (though E&Y say that is the date proposed by the EC, rather than to it)
• High level of confidence around Pillar 1 and Pillar 2 preparedness, though shockingly two-thirds of respondents did not use the draft L2 rules when producing their balance sheet, which makes you wonder what constitutes "ready" in some countries! 
• 80% not meeting Pillar 3 "requirements", with loose use of the expression "all requirements" for (as mentioned for Pillar 1, is this 'Level 1 plus draft Level 2', or 'Level 1 plus EIOPA advice'?). One of the worst affected areas is the development of a Disclosure Policy, which I find as understandable as I do sad.
• Almost 70% have only met some of the data quality requirements - I'm sure the national regulators, in particular the FSA, would wince at that, even factoring in an extension.
• Very interesting stat on the number of respondents developing Partial Internal Models (around half), with half of that number again looking for, what was at the time, "Day 1 approval". I wonder if the likely shift of "Day 1" to 2015 or 2016 allows these figures to flex, and if the national regulators are staffed to cope with it?
• "Range of capital optimisation strategies" will be applied by the majority of respondents in 2013 - curious to know why firms would not optimise their capital deployment as a matter of course!
• Larger organisations said to be tailing off expenditure during 2013 and have delivered compliance by mid-2014. Will an extension simply elongate existing expenditure plans or require fresh budget, and indeed how many times can one go 'back to the well' on this?
• ORSA is by some distance the biggest laggard in the Pillar 2 space, with only 30% "mostly" meeting requirements as they stand. Can only imagine the question was asked before EIOPA came back on the L3 public consultation in June, as EIOPA were pretty clear on what to do next.
• Some pretty flabby words on Data and IT readiness, but easy to get the general picture of "not very good" progress, particularly in the end-user computing space (three-quarters

E&Y angles

• Clearly lobbying for recalibrating long-duration debt (p5)
• Bit of scaremongering for smaller companies on their resource estimates (p6) - shake them down all you want, they just can't afford you!
• Strange bit of touting done around a lack of formal assessment around the effectiveness of one's Risk Management System (p12) - don't believe this is compulsory, only that your Risk Management System is effective.
• Also fishing hard for what was previously low hanging fruit around documentation, data governance and use test (p20).

Internal Model - specific

• Two thirds of French and half of German internal model applicants not fishing for "Day 1" approval - not sure if this is due to BAFIN and the ACP playing hardball (already seen an instance of a modeller fleeing Germany), but an extension to 2016 puts them back in the game for "Day 1" surely.
• Some expected discontent, though not in the majority, around the current SF risk calibrations (Op risk too low, underwriting and market too high). Even number found credit risk too high and too low, perhaps reflecting thought on long duration corporate debt and Eurozone government debt respectively.
• Nearly 80% of respondents expect the IM SCR to be at least 10% lower than SF SCR.

Worth adding as a footnote that 14% of UK respondents thought they'll be ready for implementation "in the course of 2012" - without Level 2 kiddies, are you sure!

FSA's Adams on Solvency II delay, IMAP and ICA - how long do you want lads?

It would appear that stabs in the dark on the Solvency II implementation date by senior insurance industry officials are like British buses - after the omerta-like silence of September, no fewer than three bigwigs have piped up in the last few days. First Sr. Bernadino decided to do his briefing via a Stateside publication, settling on 2016 as most probable, followed by Sr Montalvo who concurred (along with a great joke about his missus!).

While it didn't take a handsome Archaeology graduate to know that 2014 was ash, what the industry likes more than anything is cold, hard confirmation from their friendly national supervisor...

...which came today! Julian Adams gave a speech this morning ostensibly about the practical side of implementing the PRA's new approach after they get divorced from their FCA counterparts next year. Worth bulleting the big messages on IMAP;

• Current timetable "completely unrealistic" after Plenary postponement confirmed last week
• 2015 "...likely to prove very challenging"
• FSA will agree a revised landing slot with IMAP participants (presumably just those who have yet to submit?), UP TO A MAXIMUM OF END DECEMBER 2015.
• Will change this to match up with what comes out of Brussels if the two are divergent
• For ICAS, "we will have to live with the current regime for longer than any of us expected"
• The previously stated "aspiration" of potentially replacing ICA with internal model SCR will be formalised into a two step process. First, reconcile ICA with IM SCR (the easy bit!), then once the FSA are sufficiently happy, just produce IM SCR.
• Retain discretion to apply ICG throughout the interim period
• Benefits of this approach will therefore include much meatier pre-application evidence of use.

Hard to know where to go with this. Great news for anyone who remains on target for their original landing slots, as there is potentially some early-adopter capital benefits if they can abandon ICA. That said, the recent E&Y industry survey (which I will look at separately) suggested the Brits are mostly in a good spot for IMAP, so does extending the window negatively impact on the work already delivered? Certainly opens up a rather pricey Pandora's box around Validation activity which I'm sure many firms would have been delighted to have paid for one-time-only!

All in all, these public declarations will be welcomed by everyone who isn't writing a cheque for next year's IMAP activity...

Solvency II implementation delay - round up

"No news is good news" so goes the old motto, but in the case of this blog, "no news is new news"! After last week's sneaky peek at the options presented during trialogue discussions, the inevitable change of  EU Parliamentary Procedure file for Omnibus II was duly applied, and will now be discussed at the Plenary on March 28-31^st 2013 (honest).

That wouldn't have ruled out either of the options on the table of the Trialogue parties at the moment, but they might struggle to squeeze in an impact study on LTGs and publish the findings between now and March, particularly after it was made publicly clear by one regulator that EIOPA were not going to start that work as scheduled. The EIOPA lads did push out the tech specs for balance sheet valuation today though, which should at least get the frog out of the box.

 

It would have been a push to complete the study and leave enough digestion-time by March-end even without a late kick-off, so our friend Sr Bernadino has happily corroborated the "Big 4" speculators and faceless "sources" promoting 2016 as the new "go-live" date by giving his own counsel to the Wall Street Journal (cited in this non-paywall article). His preference for 2015 is qualified with the probability that 2016 will prevail.

 

While thumbing my nose at the Reuters article above, it does make the link between postponement and the Commission's desire to immediately spur longer-term investment in a stagnating, rioting, semi-employed Eurozone (which is much easier without Solvency II's heavy embrace, particularly the calibration of capital requirements for long duration debt instruments which the document referenced in this post covers all too well).

 

However, for DG Faull to effectively command a recalibration of that element now the going is a bit better makes you wonder how many more cherries we are going to pick - un deux trois, nous irons aux bois...

Society of Actuaries in Ireland on ORSA - a rock in a sea of turmoil

In these days of certainty around the Solvency II implementation timetable (i.e. certainly not 2014!), it’s nice to cling on to the consultant's comfort blanket of ORSA which, thanks to the IAIS and NAIC, isn’t disappearing in a hurry for global insurers. This item flagged on the SAI's newsletter last month, but dating back to April, would benefit anyone working in the ORSA space, being a "practical considerations" guide which is very accessible for non-actuaries, particularly for assessing or challenging options for the required ORSA processes.

 

The document takes care to reference the at-the-time EIOPA guidelines in each chapter (which would have been superseded by June's release of course, but didn't change seismically), and does an excellent job of focusing on required processes as opposed to ORSA Reporting, which these types of papers often do. Worth reading all but noting the following;

Overview

·     Proportionality - remember justification of approach is as important as executing the selected approach itself.

·     Documentation - "...Traditionally, this is not an area of strength for actuaries" - I'll drink to that!

ORSA Contributors

·     "It is likely" that Risk will co-ordinate the process. This logic follows on from the IRM’s survey findings (p2) which saw Risk as predominantly leading early process development, and there is nothing to suggest the other candidate functions are likely to be sufficiently staffed in the BAU world to both actively participate and co-ordinate.

·     Board as "owners” of the ORSA – this is an important point which, for practitioners, is awkwardly inferred by the Directive text, rather than spelled out. Indeed this document later goes on to say the Risk function "will likely be the owner of the overall ORSA process".

This gruesome melange of who owns what in the ORSA space (and indeed what 'ownership' confers), remains a little too common in thought papers like this, so be certain to define these elements in your ORSA Policy.

·     Capital Management function - "ORSA is the process where risk and capital management get together" - get a room you guys!

Policy and Process

·     Generally a very clean and useful section, particularly around "dynamic" and "static" processes and their outputs. Section on ORSA Report content is less useful, being based on the 2008 issues paper, and there are plenty of papers covering that topic (sift through yourself!).

·     Projection process - No suggestion of whether recommendations from balance sheet projection activity should be balled up in the ORSA Report or reported separately as part of conventional committee/Board reporting. I always found this element a nuisance to pin down, as one wouldn’t necessarily want to present material of such significance in a 20-200 page ORSA Report if it meant it didn’t get the appropriate table time at strategy days etc.

Economic Capital 

·     Practical obstacles - all seem to revolve around there being a shortage of actuarial time/resource. Well get off my land and go do some counting then!

EC and Risk Management

·     Document is a little unclear around risk appetite framework/risk management framework/risk management system terminology, which is a little unhelpful

·     Interesting comment regarding non-quantification of risk that "risks cannot be quantified" rather than "risks cannot be quantified easily" – this is an actuarial paper, you guys can quantify anything, surely!

·     Define reverse stress testing as "testing to destruction" - the UK definition is more discrete than this, and certainly more useful for stimulating debate in Board exercises

ORSA Projections

·     More industry consensus on what 'business planning period' constitutes, being 3-5 years. Barely seen anything to suggest firms venturing outside this window for projection purposes.

·     Nice simple explanation of the component parts of the economic balance sheet which should be projected as well as recommendations for projecting risk appetite metrics and the P&L.

·     Suggestion that, unless already stochastically projecting, firms will project deterministically, "unless the company is planning significant changes to its future business mix". Judging by the jostling for position around Long Term Guarantees right now, is that not likely to be quite a few!

·     Acknowledge that the approaches already used for Financial Condition Reporting should be leaned on for smaller or less complex entities.

Scenarios

·     Reverse stress testing has grown into a different beast from that reference earlier in the piece, incorporating "back-solving" (new one on me!), and looks for events that reduce own funds to zero - not sure I've heard RST defined like that before, and certainly not convinced that own funds of zero necessarily constitutes "destruction"

·     Good recommendation for selecting scenarios from emerging risk assessments as well as a firm’s existing quantum – best not to take the path of least resistance in this area of ORSA.

Omnibus II and the inevitable delay - why it's not so clear cut

Fantastic work over on the Solvency II Wire from Gideon on the meat and potatoes inside the eternally-baking Omnibus II pie, illustrating why the trialogue parties haven't just rolled over and declared 2015 as the new 2014.

While it would appear that the lobbying arms at Insurance Europe, AMICE, GCAE etc haven't piped up on industry preference yet, it looks like we have two deeply unpleasant alternatives to look forward to; hard launching a year late (i.e Omnibus II would only get signed off after the recently requested LTG consultation but 2015 would be the definitive "go-live"), or soft launching with 2 years parallel running (i.e. Omnibus II can go through before the LTG consult is finished, but with the sword of Damocles hanging over its contibution to the regulations until 2016).

My guess would be that there is little appetite in the firms for parallel running Solvency I/Solvency II to 2016 based on the administrative burdens this would currently place on the UK in particular through the current ICA process. A 'hard' 2015 and some more effective leadership in Brussels would be welcome relief to Solvency II Programmes from a planning perspective, though the knock-on effect on the model approval process and other scheduled supervisory work is yet to be seen.

Oddly, the EIOP-ians of the world pushed out the 2013 Work Programme this week which of course skips over any of the practicalities around such a delay - so having "already achieved a great deal" in Solvency II prep, they will "finalise the [53] standards and guidelines" currently required of them, set up an "internal model support expert unit", and "finalise the preparation of the [supervisory] Colleges" - and all of this while Rome burns!

It is a perverse situation when a subject as politically divisive as capital requirements for long term guarantees across the union is not as complex as trying to get three well-briefed parties around a table to agree on an implementation date. At a time when the Commission wants an inflation-busting funding rise (which Parliament have 'ole'd through) and EIOPA have grown in headcount and cost by 50% y-o-y, the alarming regularity with which national self-interest and horse-trading has derailed a project of such significance makes me long for the jingoistic certainty of the Corn Laws - I'm guessing that's not a good thing...

Deloitte with more on the US-of-ORSA

Billed as a "regulatory guidepost to the future", Deloitte in the States have published their thoughts on ORSA developments, following on from recent activity in the space, most notably the NAIC's adoption of the RMORSA Act a few weeks back.

Hard to tell whether Deloitte have borrowed much from their European counterparts, who ponied up with the EIOPA-compliant equivalent document last week, but both documents ultimately point at the same end goal, namely getting the ORSA Process and ORSA Report content right.

Confidently declaring the first regulatory filing of an ORSA Report to be precisely, errr, "Sometime in 2015", the stateside plans are anchored more to ERM and, I guess by association, ratings agency implications. The document does help identify a couple elements which, with the Solvency II hat on, are easy to forget;

• IAIS ICP 16 is bringing ORSA to the table of all signatories at some future juncture (which means I may get a job back home one day!)
• Existing techniques for monitoring solvency, even in a jurisdiction of this size, are seemingly past their sell-by-date in terms of both content and turnaround time (p2) - holds true for many of the Solvency II-covered countries as well (plenty on that topic in here).

The rest of the document draws out the preparatory work which firms should be undertaking, despite the relative lack of certainty at this point in time, such as increasing real-time data availability and changes in reporting, management and governance structures. It also touches on suggested content, process implementation (more like formalisation from experience), and a checklist of operational considerations, resourcing (or even briefing/coaching) being highest priority in my mind in 2012.

Good document for you statesiders to pass round your friendly non-executive directors anyway, as an early socialising of the concept in this format goes a long way when you have tiny windows to educate them on the topic over the next 3 years - looks like you will be filing ORSA Reports before we are!

Interesting footnote is that AIG have been labelled as a potential SIFI today - ORSA may be 5 years too late to have saved the behemoth it once was, but let's hope it can help its slimmed down current-day version.

FSA on ongoing appropriateness of internal models (which aren't appropriate yet...)

Ploughing on regardless like a John Deere with a lobotomised driver, the FSA continue to work on their plans for ongoing appropriateness of internal models after Solvency II goes live. Having put their initial ideas out for feedback in June, they have this week provided an update on responses received, which hinted at a few things;

• IMAP Participant apathy - 10 responses (attrition rate is potentially rising these days, but we must still have 60-odd with skin in the IMAP game, so that feels pretty lousy)
• That inappropriateness would only be to a firm's benefit, hence the supervisory response to its detection "in all but exceptional cases" will be a capital add-on (PS if 'inappropriateness' is a word, I'll mange my chapeau, but I'll stick with it for now).
• That the early warning indicators planned will form part of the FSA's BAU Supervisory Review Process alongside "in particular" model validation results - any danger the early warning indicators may therefore be used informally in the pre-application work? They do go on to stress in the letter that they "do not intend" to use early warning indicators in the initial approval process, but bearing in mind no-one showed up for round 2 of the three-way today, we're all eating at a pretty moveable feast right now!

The link between early warning indicators and validation results is probably the big message in here - could verging on breaching the % tolerance, plus a negative validation report, lead to a capital add-on in 2014/2015/20XX?

KPMG on Solvency II - Progress in an uncertain world?

Handy survey from KPMG pushed around today touching on technical practices of UK Life firms (35 responded to the survey, so a decent enough sample). Appreciating the irony of the title in the same week as the rumour mill on an extension of Solvency II go-live to 2015 went into overdrive, the content is still valid on the benchmarking front, so worth a comb through.

Of particular interest I noted;

• IMAP remains top priority for those in the application process, though KPMG highlight that firms are closely reviewing the advantages of the IM versus standard formula due to FSA fussiness, implementation costs snowballing and less-than-attractive results coming out of the model (i.e the fabled 20% reduction guess-timates are perhaps out of reach!). Some comfort there for anyone struggling with the same issues.
• Documentation second priority for IMAP and non-IMAP firms - concerning at this stage, bearing in mind the FSA will have had plenty of opportunity to feed back on the big ticket items. If the industry still doesn't have a handle on regulatory requirements (or it does, but is not meeting them!), then perhaps it's a good job there is an extra year in the offing! 87% of the IMAP respondents said IM documentation specifically is causing challenges.
• Pillar 3 also high on priority lists - might we expect that to slip back on the agenda with the extra year? Particularly around software solutions, which may have previously been the only way for some laggards to populate QRTs etc within the proposed timeframes, some may decide to do something a little more ad-hoc for 2013 rather than full dry-running. Two-thirds of respondents note that turnaround time is a concern, and unsurprisingly 'achieving sign off' is a concern of around half, with the tight timescales naturally impacting on the likelihood of getting an executive to confidently put pen to paper.
• Only a third of respondents have dry-run their ORSAs - feels instinctively light, with those yet to run spread across the next 5 quarters. Natural areas of concern are later highlighted in this area, with ability (or lack of) to project across the business planning period, and plugging the ORSA process into the BAU strategic decision making process troubling around half of respondents. Bearing in mind only a third of respondents have performed any on-to-one training (with group training/workshops seemingly the preferred route), they may find that one will facilitate the other!

Some other noteworthy points;

• Only 80% think Solvency II will "significantly" impact the wider business - struggle to see how it could not frankly, but appreciate their are non-IMAP firms in the mix here
• Disturbingly large number of IMAP candidates appear to be behind the curve on P&L Attribution and Validation - interesting to know on the latter whether that is in respect of their internal findings or the FSA's view.
• Two-thirds of IMAP candidates using external assistance for validation - wonder how long that gravy train stays on the tracks with a shift to 2015?
• 20% don't have TPs in their IM scope - is that a bit chancey at this stage? I thought the FSA view on scope was a bit more onerous than some applicants may wish for.
• Datawarehousing seemingly moving towards being the preferred route to meet Pillar 3 obligations where an existing solution has not already been implemented prior to Solvency II

Good intelligence for both IMAP and Non-IMAP firms, and should provide some programme managers with crumbs of comfort when they see what's eating their counterparts right now.

Deloitte on "How to conduct the ORSA" - facts and apocrypha

While our pals at the FSA, EIOPA, the CRO Forum, 3 of the Big 4 (here, here and here), the Little 3 (here, here and here), the IRM,  the Irish SoA, and even the guys in the stars and stripes have deemed to recommend to all and sundry what ingredients will make a good ORSA, Deloitte have chipped in this week with a 50-page whopper that tells us everyone else was wrong and they are right...

...well OK, not quite! Deloitte's release about this "important yet enigmatic" area, which seems to have a mainland Europe-flavour to it, works its way through EIOPA's reformulated opinion on L3 ORSA guidance released in July, summarising what changed between the Nov 2011 and July 2012 versions. I of course managed this feat two months ago, but I couldn't quite pad it to 50 pages! They then embellish a section-by-section analysis of the two documents with some charming apocryphal tales of what "many companies" or "the industry" are struggling with currently (i.e. their clients' problems!).

As with most things generated by the behemoths, it is a really useful piece of material despite on the face of it not adding anything new to the knowledge pool, so from an ORSA consultant's perspective, I've made the following notes;

• Emphasises that supervisory intervention will come from lax ORSA processes, as opposed to ORSA Report content (which will drive the US approach)
• Notes that, given the opportunity for the ORSA and the SCR calculations to to be conducted on different reference dates, that this may allow organisations to keep any existing strategic planning processes where they already are in the calendar, rather than unnecessarily shift them to, say, follow financial year-ends. The proviso of "no material change in the risk profile" may of course discourage that, if only due to the need to define "material"!
• Some rather controversial free text around risk appetite ("intuitively simple" as a concept) and risk appetite frameworks ("very much a work in progress" at insurers) - appreciating progress is somewhat inconsistent across industries and the inter-body squabbling on the matter, I can imagine many practitioners would argue the opposite of both points - it's complex, but we're well on the way!
• Highlights difficulties with performing obligatory entity-level ORSAs if risk appetite is expressed in regions/products/funds, which seem perfectly reasonable anchors for risk appetite statements on the face of it.
• "Most organisations" defining AMSB as parent company Boards, plus entities if applicable - no evidence provided though.
• "Many firms" struggling with the "cultural challenge" of getting Boards to drive ORSAs - this I found odd, as many ORSA processes will already be in place to a greater or lesser extent, and most would feature in their individual crystallised reporting form in a BAU board pack. They go on to suggest that getting AMSB input into stress and scenario testing is one way of evidencing ORSA "driving".
• Comment that "In general, the ORSA guidelines were seen as too prescriptive" [my emphasis] - I generally recall the clamour from the industry over the last 3 years being that there isn't enough!
• Common (unevidenced) theme identified that ORSA policies have tended to be signed off by Risk Committees, which may not satisfy the AMSB sign-off requirement
• "Some organisations" electing to split out record of the ORSA Process from the ORSA Report to trim the document size - makes perfect sense, as there's no danger of the co-ordinating function not retaining those records for repeatability purposes.

Plenty of other clutter in there on risk quantification and capital management, but nothing controversial, just nice to read. Bon appetit...

FSA - Data Review findings in context of IMAP

So I guess there was an inevitability that, with all of the resourcing around Solvency II programmes over the last couple of years being focused on filling the yawning corporate governance chasms within EU insurers with bald, handsome, impeccably mannered Pillar 2 consultants (well, one out of three ain't bad!), that some of the more mundane aspects of preparations would take a back seat.

Step forward Data Quality! With the considerable efforts expended by UK internal model applicants already on plugging their calculation kernels in, risk calibration, loss function fitting, correlations etc, the FSA's latest review findings take us right back to the starting point of SCR generation - data inputs - and they are not impressed.

The FSA began working on this topic with the industry as far back as this time last year, and are not scheduled to be finished with this thematic review until Q3 2013. Bizarrely, they note in the introduction to these review findings that their scoping tool released in July 2011 aimed to help assess compliance with both Level 1 and draft Level 2, which wasn't released to the industry (i.e. leaked) until late October - quel chance mes amis?

Splitting hairs on timings aside, just reading the five section headings of their review work would be enough to reduce many BAU staff to a quivering wreck ("Implementation of the Data Policy"? What, today?), so I wasn't expecting a glowing report. That said, the quality of data which ultimately results in today's technical provisions, capital requirements etc is seemingly fit enough for purpose, so a full-on hatchet job would be a poor reflection on both the industry and the regulator.

Assuming a 2014 go-live date (looking unlikely as of 9pm GMT today!), the areas of major concern for insurers, based on these preliminary findings, would be;

• Difficulty in assigning data ownership - there will be enough Pontius Pilates in the BAU world who will happily wash their hands of data ownership until the cows come home. Programmes will need to be extremely forceful in assigning ownership and ensuring it sticks
• Inability to articulate "accurate", "complete" and "appropriate" - this should have been an easy win, so I'm surprised that it is seemingly an issue. Realistically, should we expect the business to take ownership of data sources when we cannot define what is and isn't acceptable output from them? 
• Data Dictionary/Data Directory confusion - a suite of pretty scathing findings in this field, suggesting both over-simplicity and over-complexity has been found in the workings of Data teams.
• Spreadsheet controls and non-compliance with end user computing policies - onerous expectations on the face of it (paragraphs 4.41 and 4.42), which will be a shock to both programme budgets as well as end-users.

Some other interesting points made in the review include;

• Firms either using their Risk Committees, or a bespoke "data steering" committee as their data governance body - pretty sure the Risk Committees won't fancy this as long-term work.
• A number of suggestions as to what areas are not currently being consistently addressed when assessing materiality (p11-12)
• Some very useful comment around data classification methods (p13)
• Suggestion that, as I expected, the techniques applied to assessing the quality of data provided by third parties is not robust enough - industry-wide consensus on how to interrogate your outsourcing parties would be useful in this respect.
• A rather strange comment around poorly designed/controlled data warehouses - I can only assume they have seen one or more horror stories on their travels, as the warehouse is surely the way to go!

Any smart cookies who haven't got going on Phase II with the FSA at this juncture should be stripping this down line-by-line. For those of you outside of the UK, you may want to cross your fingers that your friendly national regulator doesn't use this approach as a yardstick...

USA and ORSA - Let's do it baby!

Promising sounds from across the pond, as the NAIC make some definitive movements (detail here and here) towards the inclusion of Own Risk and Solvency Assessments as part of their regulatory reporting package - difficult to find the exact paperwork, but the summary of what was tabled by the ORSA subgroup at their August jamboree is here, while a statement to cover their adoption of the Risk Management and Own Risk and Solvency Assessment model act is available here.

I have touched on the movement of the US towards production of ORSAs in earlier blog posts, including recently on the preparedness of firms to meet ORSA reporting requirements,

From another earlier post, I can see the 15 volunteer company pilot which was mooted at the start of the year ultimately became 13 companies by the conclusion of the pilot (no word on who started, but couldn't be bothered finishing!). According to the Clearwater information, only 8 participants ORSA Reports were considered "complete", this despite the NAIC providing an ORSA Manual from which to work from.

Is this ratio of incompleteness indicative of what the 27 EU national regulators are likely to encounter in 2014, or is the lack of prescriptive guidance at Level 1 and Level 2 handy in this regard (i.e. ORSA Supervisory Reports will be "passed" regardless of quality, and regulatory arbitrage is back on the agenda).

Either way, Clearwater also note that 2015 is looking like the most likely time for imposition of ORSA reporting, so the guys will still have time to borrow from our experiences, as we can from theirs - suggested improvements  from the NAIC's sub-group to the participants (none of which would hurt anyone in the ORSA space over here!) include;

• Include a summary of “significant changes” from prior year
• Provide additional detail regarding risk managers and compensation
• Include additional stress testing, specifically for liquidity

 Looking forward to the sub-group's next report, the approach over there appears to be relatively easy to follow and well led, which I guess it can afford to be if it isn't masquerading as something other than a filing requirement... 

Did we learn from Equitable Life? Professor says "No"...

A cracking thought paper was released this week by Professor Roberts from Kings College regarding the lessons one could reasonably have learned from British mutual Equitable Life's demise in early 2000s, and more importantly, did UK plc actually learn them! (simple timeline of recent events here for our non GB readers, but anyone whose website starts with a banner exclaiming "recreating value for policyholders" has clearly had a lean few years!)

This document works nicely as an aide-memoire for anyone working in a financial services risk function as to what one should be wary of in the day-job. Professor Roberts ties in some of the most recent work in this space (leaning heavily on the Cass Business School/AIRMIC Roads to Ruin research and its conclusions in particular), and comes to the inevitable conclusion that lessons are well publicised, but never learned.

My main concern as a risk specialist is that certain recurring themes in the failure of financial services firms appear to remain outside of the Risk function's control or indeed influence, notably;

• Hubris of Senior/Chief executives - Almost every example of failure in insurance and banking referenced in Prof. Roberts paper includes a flukey, unchallenged CEO who got bolder as circumstance rather than skill kept their businesses growing. I had flagged a couple of articles in a post last year touching on what makes an executive tick, and since then I have seen psychopathy and leadership (as opposed to cherubic faces!) examined further in a popular mainstream book. The legitimate concern here of course is that CROs are seemingly no nearer to being guaranteed seats at the top table, let alone a veto to keep the most dominant executives in check, regardless of their loud voices, when necessary.
• Poor quality governance from Non-Executive Director level - Risk functions simply must have the NEDs performing at their optimum in order to provide acceptable services to their employers. While the "old school tie" approach to recruiting NEDs may take a generation to phase out entirely (to be replaced by an army of Fembots, so Viviane Reding would have us think), Risk functions are left with tottering old fee-sweepers as their key route to early intervention. The more visceral approaches to documenting risk appetite/tolerance/preference now being supported by corporate governance codes and vocational/professional bodies may make it easier to raise concerns with NEDs in future (probably as it will be colour coded and in Excel...), but until they are actually prepared to risk their comfortable semi-retirement with some probing questions in the C-suite itself, should Risk functions ever think they can overcome such a void?
• Failure of regulation - Should Risk functions be banking on the (inevitable?) failure of the nascent regulatory environment, and reserve for subsequent claims/compensation if one or a number of products are "too" successful, thus providing the necessary quantum of dissatisfied customers for the regulator to act? I would have laughed this suggestion out of the room until a year ago, since when the FSA have made retrospective calls on interest rate swaps, PPI, and TLPs, all of which would have been presented as "compliant" products in the Boardroom.

For the Solvency II fans, it also notes on page 11-12 that Equitable Life featured in the research which grew up to be Solvency II! Maybe we did learn something after all - if we smash up the affordability of long-term guaranteed products, we can all go unit-linked and never have to worry about another Equitable...

Clear Path Analysis - Solvency II "The Global Dimension"

This piece of research from the guys at Clear Path Analysis (sign up required) has been in the offing for a while, and as I covered their last impressive release on this blog (and I don't have a life :-( ), I've been looking forward to it...

There is certainly plenty in here to keep those of every persuasion entertained (with the sponsors as omnipresent as their funding permits!), but I've sectioned out highlights for my own benefit;

Foreword

• Solvency II "...clearly a step in the right direction" - oddly, not followed by a punchline...
• On the likelihood of Sol II remaining ahead of the IAIS approach to solvency regulation - "Asia no longer looks to the west for regulatory best practice", going on to cheekily recommend a cherry-picking approach

Barbara Ridpath - think tank CEO, on short-termism and regulation

• Highlights one (widely acknowledged) consequence of Solvency II being a disincentive to invest in long term and/or non-Sovereign debt instruments, which is not in the mandate of the regulations, or indeed the regulators.

Roundtable on un-level playing fields between EU and non-EU insurers - includes Standard Life Sol II lead

• Solvency II likely to weed out companies who can't handle the ongoing compliance cost from running EU operations
• Large piece on Canadian equivalence (of particular importance to Standard Life of course) and the practicalities of equivalence being neither sought nor at this point offered for a non-EEA wing of a EEA HQd insurer.
• Standard Life not happy with equivalence assessments running concurrently with IMAP, due (rightly) to the significance of a "yay" or a "nay" to the strategic thinking around non-EEA arms.
• Suggestion that Asia is looking harder at the IAIS approach as opposed to Solvency II for future direction

Data and Risk Reporting Interview - Dan Wilkinson, ERM head at Liberty Syndicates

• Increased formality around Data and Risk reporting, using both controls-focused and risk-focused approaches. Makes reference to a monthly management committee which takes reporting on data deficiency matters, which I have heard reference to on the circuit before, and certainly demonstrates that data inputs, whether for internal modelling or for strategic decision making, feature as a high priority, rather than taken as read.
• Notes that his employer is moving risk reporting away from the 1-in-200 VaR to "...more foreseeable points in the distribution", which we definitely like to hear in the ORSA world!
• Alludes to concerns around disclosing ORSA-related information to the outside world, which is an area yet to be adequately chewed over by regulators and industry quite yet, let alone ratings agencies, analysts etc
• "Sensible amount of proportionality" should be adopted when deciding what should be disclosed - is that a contradiction in terms, an oxymoron, or some other expression I can't quite lift off of Google!
• Sensibly stresses that an effective emerging risk policy should allow input and challenge at all levels of an organisation, when asked about internal models evolving with the risk profile of the business.
• "...biggest deliverable is cultural" - i.e. stripping back your long-since-gone consultancy friends' technical documentation (where required) in order to make it more accessible and free BAU staff to use the new facilities, be it a spruced up RMF or a full Internal Model - appreciate I may be doing myself a disservice by highlighting it!
• Didn't agree one bit with the comment that ORSA could "...inflate regulatory capital, based on rather speculative assumptions" - FSA have been pretty clear that ORSA has no bearing on required capital, appreciating the nuances around what they say and what actually transpires!
• Also wasn't massively sold on the comment that the ORSA "...should bring together information that is used within the business to allow analysis of medium term trends", unless of course he was cut off mid-sentence!

"Challenges of Pillar III" roundtable, focused seemingly on getting asset managers to pull their fingers out! Includes a CRO from an Italian insurer

• "Asset managers who are not willing or able to invest in appropriate data management and reporting systems will find it hard, if not impossible, to attract or retain insurance clients" - so there!
• Suggestion that "parts of the industry will have to get up to speed on" underlying assets which they are currently invested in for the look-through basis - I suspect that there are plenty of horror-stories to emerge once some CIOs and CFOs get a proper butchers at what some of their collectives are actually invested in, particularly with the advent of outsourcing investment management or just administration over the last decade or so...
• Note that ratings agency priorities over the near-term may focus more on differences between SF and IM-calculated SCRs and the impact of transitionals, rather than purely on SCR outcomes.
• Note that "Solvency II is effectively a lead in this area [transparency]", so no pre-conditions should be expected from ratings agencies
• Even bring up the old gripe that EEV/MCEV is still not understood well enough by agencies/analysts, so by implication there should be few worries about additional disclosures!

Considerations for Building a Diversified Investment Portfolio - Charles Pears from Insight Investment

Really accessible and well structured two-pager on portfolio diversification, of particular use to non-experts which covers

• Rationale for insurance companies looking for low risk returns;
• Risk drivers which make that difficult in today's environment, even if accepting minimal risk
• Why companies may look to seek excess returns, and the constraints around that
• Why decisions to accept more risk for enhanced rewards should be (but perhaps aren't always) knowledge based
• Basic options for enhancing portfolio returns without breaking the bank from a capital perspective.

Interesting is wrapped up with a comment that "...we expect insurers who adopt a Liability Driven Investment approach will secure a meaningful competitive advantage" - hard sell perhaps, but the rationale for it is well documented here.

Omnibus II moves again - accelerating the inevitable?

No sooner has the holiday season drawn to a close (and by that I mean everyone else's holiday season, as we don't 'do holidays' at Governance Matters...) than our good friend Omnibus II has jogged down the road another month - the procedure file has just been updated to show it will be hitting the November parliamentary Plenary (by my count, the 5th postponement since 2011).

Not entirely sure of the rather abrupt nature of this movement, bearing in mind the main players are probably still wearing their 'budgie smugglers' in the Med at the moment, but Gideon over on the Wire picked up on an issue which may have led to an early concession that October was simply too early, with an impact assessment on LTGs likely to roll off the back of the next trialogue.

We are also close enough to the finish line (don't laugh) to be getting into the national political cesspits, so a whiff of sabotage and national interest may also be coming to bear. Not only have the UK political opposition decided that Solvency II is controversial enough to start point scoring on, but last month Sharon Bowles (current Chair of ECON) gave an astonishingly frank interview to Risk.net (subscription only I'm afraid) where Das Küchenspüle was thrown at the German contingent. Quotes included;

• "...certain leading German MEPs have publicly said that Solvency II is never going to happen anyway" and
• "...I think there is a subtext here that the Germans - and I think this is well known - are trying to jettison the whole of Solvency II"

Well if Der Wahnsinn really is eine schmale brücke like the song says, its probably best not to cross it!

KMPG - Economic Capital Modelling in the Insurance Industry survey

Just when you think things will be quiet while the normal world goes to the beach for a month, KPMG chip in with a survey on EC modelling, polling 43 of the world's largest global insurers, with a nice spread of continents and insurer-types represented. Over 90% of respondents were Chief Actuary/CCO/CRO etc level.

With this subject being a hotter potato right now than a Jersey Royal locked in a sauna, in a tank top, in Bangkok, I've had a trawl through and found the following highlights:

• Most reasonable business uses of EC metrics appear to be applied or planned by respondents (pricing/underwriting decisions being the straggler)
• 40% of respondents said management understanding of EC is still limited - schematic on p9 showing the differences between 'sophisticated' Europe and 'savage' RoW hints at some kind of Solvency II dividend, though the results are not flattering across the board.
• Interesting schematic on implementation difficulties (p12), broken down by continent - data quality seems to have topped the list of implementation problems, which is no surprise I guess, but they neatly connect it with potential for over-reliance on expert judgement, simplifications and approximations to fill the gaps (all of which are to the detriment of a pure EC approach, at least in theory).
• Curve fitting is the majority-used approach (58%) to deliver model outputs quicker (i.e. 'lite' modelling), with replicating portfolios and LSMC less favoured
• Understanding around fungibility and dependency higlighted as areas for improvement
• Two-thirds still not allowing for sovereign debt risk in their EC calcs - I admire the persistency!
• Very interesting bit towards the back on effectively projecting EC, the holy grail for anyone in the ORSA space right now. While they loosely refer to the business planning horizon as "typically 3 years" (I've seen longer than that before breakfast, lads!), the point made is perfectly valid, namely that methodologies for this kind of projection are in their infancy.
• Finally, a nugget on Operational Risk Modelling (which I only touched on yesterday!), by some distance the least effective part of respondent's EC frameworks. They do note that 60% of EU respondents have moved to stochastic-based Op risk models with all bar one using expert judgement to calibrate them! They also bemoan the lack of credible data and subjectivity around cause/effect/latency of op risk events.

I guess the most surprising element of the document is how cagily it is written, as if EC modelling of risk profiles still has something to prove against, say, arbitrary and aimlessly prudent margins - the authors acknowledge that, if done badly, EC modelling is an accident waiting to happen, which supports the "rigour" being applied by the FSA when pre-assessing the UK insurance industry's model applications.

Also surprised that more reference to ratings agency demands wasn't made, particularly with that element seemingly influencing EC calibration points in the EU right now (hands up if you're at 1-in-2,000!)

Operational Risk - Scenario analysis and best practice

Short and sweet - couple of interesting papers in the Op Risk space which should help anyone working on operational risk scenarios or indeed brushing up on best practices.

Milliman start off with this scene setter on approaches being adopted in order to bypass the rather broad brush (and I suspect in some cases, financially onerous) standard formula approach to calculating the Op Risk SCR element. They of course touch on the old-but-legitimate complaint around imput data quality if one wants to model their capital requirement rather than sketch it on the back of EIOPA's fag packet.

While they take the opportunity to applaud the efforts of those creating a database of scenarios, or indeed using the ORIC database, they ultimately come down on the Bayesian side of the debate, which I suspect is a touch too rich for most people's blood, but those of us with deep pockets (and large Op Risk SCR totals!) may give that a stab.

The second piece came from Corven around best Op Risk practices from other industries, and how they could be adopted by the Financial Services industry. Not much of the research is actually published yet (and the main meat of their published findings is hidden behind FT's paywall), but I found it particularly interesting to see which industries were cited as areas where Financial Services could learn from.

Some good interim stats (full report to follow in October), including;

• All respondents to date trying to tie in op risk performance with compensation
• Regulatory hounding appears to have inspired 64% of respondents to inprove Op Risk management
• Full root cause analysis only conducted by 38% of respondents upon a "major risk failure" - woolly words aside, that is not impressive at all.
• Responses to major risk incidents overwhelmingly look to amend processes and systems, not the people and capabilities that inevitably led to them!

The example of air crews being compelled to point out senior staff members' inadequacies is a particularly powerful example of bottom-up op risk mitigation, though I struggle to see its application in financial services. However, it was also strange to see the Oil industry also cited as a best practitioner - the major risk events in that industry surely draw parallels with financial services at their most grasping over recent years.

Deloitte and Forbes - the new world of Risk Management

This Deloitte/Forbes paper is sub-titled "Aftershock", which makes anyone of my age immediately recoil at the though of the world's most repulsive bar shooter - it is in fact a pretty decent stab at running on from the kinds of financial services-specific research which came off the back of the 2006-2008 mega-turbulence (these were mostly titled "We've broken the World, what are we going to do" :-( )

At 192 respondents it is a decent sample size, though is US-centric and non-Finance organisations, so not a great all-rounder for you global readers. However, the central message that risk management programmes and frameworks remain in a state of flux (hence the aftershock motif) is a worrying one when one examines the stats behind it:

• 91% are reorganising and reprioritising approach to risk management in next 3 years, citing continued market volatility.
• Only 37% had plans to provide additional training in that respect
• Centralisation cited as more efficent way of bubbling risks to the top - interested to know if that is everyone's experience?
• Around 50% retain primary responsibility for the "risk management approach" with CEO or CFO, with the CRO in third at 20% - should we be expecting that percentage to be moving up or down at this juncture (in particular, does a CRO need a seat at the top table to be responsible for ERM approach?).
• Example cited of ERM being managed in the corporate strategy department, which I thought was an interesting development.
• Biggest challenges included; 26% stating that incentives are not rewarding 'risk based decisions'; 22% struggling with the misalignment of the business operating model and the ERM model, and 23% suffering a lack of information to make risk based decisions. These three (there are of course more in the list!) struck me as common issues when preparing for Solvency II, so handy stats in that respect.
• Staggeringly, Social Media is equal fourth on the list of "most important risk sources over the next 5 years" - equal with Financial Risk! Not to underplay the emergence of social media and its multiplier effect on reputational risk, but seriously?
• Most "risk types" are monitored either periodically or continuously, though strategic and reputational risks seem to be most likely to be measured on an ad-hoc basis (something which you ORSA consultants out there will sympathise with!)
   

I say "worrying" at the top here from a professional perspective - is it reasonable after events as seismic as those experienced in the last 5 years for the risk profession to still be sliding in a mass of new parts into the ERM machine, as opposed to tinkering under the bonnet?

Bearing in mind this doesn't include the financial services industry, maybe the timelag is rational, as the other industries have had plenty of time to learn what not to do!

Society of Actuaries in Ireland Newsletter - ORSA, Solvency II and Cocktails

Always a riveting read, the Irish Society of Actuaries fired out their newsletter for August, which as ever is a treasure trove for any diet-mathematicians like me who need to have things spelled out for them on all matters actuarial.

Of particular note was their report from the ORSA Working Party (p7), which covers a presentation and paper delivered earlier in the year - to show what a fantastic bunch the SAI are, you can access both the full working party paper (all 52 pages of it) and the presentation slides on their website. I picked out the following from the newsletter (I'll read the working party paper in more detail separately);

• "Compilation of the ORSA Document is quite a significant undertaking" - emphasising the difficulty in selling ORSA in purely process terms
• "ORSA is a risk management exercise, not a compliance exercise" - I would prefer to sell it as both, as it is unfair to undersell the compliance angle, particularly to smaller firms who may not have gone to the nth degree on projecting capital adequacy before.
• "ORSA needs to be readable..." - again, almost impossible not to talk about it as a report, rather than the report being the output of a process
• "ORSA would be of great interest to the Board" - I would hope that the Board would be queueing up next to the printer to get their hands on ORSA reporting output!
• Projecting the business planning period "...likely to be 3-5 years into the future" - interesting to see what the general consensus is on this (I feel this will fit most insurers, but if you are shooting for longer, would love to hear how you're doing it!)
• Some discussion over how prescriptive the Central Bank of Ireland may be on the ORSA documentation front (bearing in mind how liberal the FSA have been on this matter) - seems to suggest that a similar approach will be taken i.e. justify what you have.

There are a couple of nice pieces towards the back on unintended consequences of Solvency II and Basel III (on cost of capital and funding patterns), as well as some nice real world examples of why one should be wary of actuaries who manage to change internal model parameters in a way that magically reduces capital requirements each year!

The less said about the actuarial cocktail making class on the back page (complete with bottle of Kia-ora in centre shot) the better I suspect...

FTSE Insurers and IMAP - Resolution are out!

Shock news announced today (unless you actually listen to the grapevine I guess) that Resolution have dropped out of the FSA's internal model application process, citing the decreasing likelihood of go-live on Jan 1st 2014.

Unlike the other big-hitter candidates who appear, despite their concerns on go-live date, to hunger for approval at outset, Resolution seem happy to take their chances (at least in year 1) with a standard formula approach.

They note the following;

• "Looking forward, the Group believes there is heightened uncertainty around the future requirements of Solvency II both as regards its structure and timing of implementation. The implementation date for Solvency II has been delayed to 1 January 2014 and the Group expects that it will be delayed further" - p48
• "In line with this it has concluded that it is in the Group’s best interests to delay its internal model application to allow time for any further changes in the Solvency II implementation timetable and to help smooth the Group’s overall change agenda. Accordingly FLG has withdrawn from FSA’s internal model pre-application process and is now targeting obtaining internal model approval in January 2015" - p56
• "If the Directive is implemented in 2014, FLG will be ready to comply with its requirements through the use of the Standard Formula. Use of the Standard Formula, pending obtaining internal model approval is not expected to lead to any significant disadvantage in terms of capital requirements" - p56

I would hasten to add that this decision cannot reverse the whopping £48m of transformation costs for the 6 months booked predominantly to Solvency II (they were less than £60m for all of 2011!).

Whose next for dropping out...