While the U.S. insurance industry is making strides toward Risk Management and Own Risk Solvency Assessment Model Act (RMORSA) readiness, a survey conducted by PwC shows a gap appears to exist between the perception of RMORSA preparedness and the actual completeness of insurers' enterprise risk management frameworks.

PWC has just released its 2012 U.S. Insurance ERM & ORSA Readiness Survey.

The RMORSA Model Act, which is in the process of being implemented in state law, requires insurers to manage a comprehensive ERM framework that is embedded within company operations by January 2015. While 82 percent of survey respondents believe their existing ERM processes are largely adequate for the requirements, 38 percent of company boards are not engaged or are only passively engaged in risk management, showing that risk governance may not be up to RMORSA standards. In addition, 35 percent of companies indicated that they do not have a risk appetite linked to business strategy and financial goals, which is crucial to a comprehensive and effective ERM program, according to PwC.

“Setting the risk strategy, implementing and validating a capital model and developing effective risk reporting capabilities could take a couple of years. Our survey shows that many organizations may be underestimating the amount of work it will take to meet the RMORSA requirements” says Paul Delbridge, leader of PwC's risk and capital management services practice. “Achieving a risk-aware culture through the organization will require all areas to understand their roles and responsibilities in relation to risk identification, measurement, mitigation and monitoring within the ERM framework.”

PwC's survey addressed the four main parts of an ERM program that have direct influence on RMORSA preparation, namely risk strategy, risk governance, risk management and risk quantification. Key findings in each of these areas include:

Risk strategy – 25 percent of companies reported that risk appetite metrics are not part of the business planning process, while only 57 percent include some, highlighting a significant disconnect between risk management and strategic decision-making. A quarter of companies do not have a risk-specific limit framework to guide the business' compliance with risk appetite. A robust risk appetite and limits framework enhances risk governance and provides a platform on which to engage every stakeholder.

Risk governance – More than 30 percent of companies do not have a dedicated chief risk officer, with three quarters of these insurers reporting that other positions cover the role, often on a part-time basis. The CRO or risk committees will be largely responsible for compliance with the RMORSA requirements.  A key component of successful ERM is a risk culture that involves the entire organization and fosters shared responsibility for risk management.

Risk management – 22 percent of companies reported not having a formal process to address risk identification, with most of these insurers adopting an informal one to address risk identification.  A small minority reported that they do not have or do not see a need for a formal process. Moreover, many companies do not have fully documented risk policies that cover the significant risks to which they are exposed. The RMORSA process is also an ideal opportunity to perform a comprehensive stress, reverse stress and scenario testing exercise. RMORSA should take place in conjunction with an organization's business planning process, leading to a high degree of coordination between risk, underwriting, strategy, finance and compliance functions.

Risk quantification – 37 percent of companies are not using an economic capital measure in addition to the more traditional capital metrics of statutory capital, such as GAAP and rating agency capital. Economic capital models are very useful tools in risk management and risk aggregation, but even those organizations that have them in place do not necessarily use the information to the fullest to make strategic decisions. Given the business-critical uses to which capital models are put, RMORSA requires models to meet the highest quality standards, be appropriately calibrated and fully tested and documented.

“Preparation for this January 2015 deadline brings a greater focus on ERM by all insurers, encouraging them to move their RMORSA processes and ERM frameworks beyond regulatory compliance alone, to become more strategic and value-adding in nature,” says Brian Paton, director at PwC's actuarial and insurance management solutions practice.

About the survey

This 2012 survey is a continuation of PwC's two previous global ERM surveys, but exclusively targeted to the U.S. insurance market. The 65 survey participants comprised a mixture of life, P&C, and health insurance companies, covering U.S. headquartered international groups, U.S. domestic groups or companies, U.S. subsidiaries of European groups, and U.S. subsidiaries of other foreign groups.