Enterprise risk management (ERM) is the process of planning, organizing, leading, and controlling the activities of an organization in order to minimize the effects of risk on an organization’s capital and earnings.
If something is important to a company, it will be in the performance metrics for management’s bonus. If you want staff or budget for ERM, your job is to figure out how ERM directly affects the organization’s goals for THIS YEAR! Not next year, not five years from now, but by the end of this year. If your company is experiencing some sort of difficulty, getting budget for ERM will depend upon your ability to show how ERM will enable the company to effectively remedy that difficulty.
Linking the ERM activities to corporate objectives applies to every activity within a company, but because ERM is a rather new discipline, budget for it is usually not embedded in the usual budgeting process.
Since most companies want profits and growth, we need to consider that those items are also a part of management’s survival and onus.
The risk inventory is one of the first steps in establishing an ERM program. The remainder of this article assumes that has been accomplished.
If you know the operations, you need to learn the metrics. If you know the metrics, you need to understand the operations. What happens, how it is measured, and how it affects the metric important to management (usually profits, at least.)
If management’s actions do not line up with the organization’s published objectives, look for something else that is their objective and align with it.
Compare ERM functions with those elsewhere in the organization
Compare the functionality of what you want to do with what is already being done within the organization. An Economic Capital Model and an investment portfolio model are essentially the same thing; only the subject matter differs. And when you realize that the variation in investment outcomes is tiny compared to the potential variation in underwriting income, you will wonder why investments are modeled and underwriting results are not. One answer is that investments have a broader audience – investment managers model investments for all sorts of clients and can use standard platforms. But with recently developed, commercially available, platforms to model insurers such modeling will become more mainstay. Remind others of where Catastrophe modeling was decades ago and where it is today, and you can springboard onto an argument for Economic Capital Modeling.
Look for short term returns — “Quick hits”
Bonuses are paid at the end of the year, so whatever you can come up with that will affect the current year will be seen far more favorably than something that will affect two or five years down the road. And a series of short-term successes will pave the way for acceptance of longer-term initiatives.
Pricing changes hardly affect this year’s profits, other than discouraging underpriced business and encouraging over-charged business, where the change remedies those issues. For insurers, where premiums are earned over a six-month, one-year or even longer period, adding premiums is not as effective on a short-term basis as avoiding business that is underpriced in the first place.
Look for risks to specific situations
How does it affect the enterprise as a whole?
- “Get the Ohio branch up and operational by the end of the year” (expense ratios)
- “Reduce headcount without reducing customer satisfaction.” (expense ratios)
- “100% uptime for IT.”
- “No cyber losses”. Work with CIO and the expected cost of the most likely cyber-related loss (denial of service, data-napping, whatever) and its impact of profits, reputation, and CEO’s job.
These risks are being addressed by others in the organization – join with them rather than trying to compete for funds, to make sure THEY are successful in mitigating the risk. Aligning with others enables you to go a lot farther than competing for funds.
Rather than hire a person, engage others within the organization to do some of the work, if you can. Many appreciate the variation from their daily tasks. And often, they can provide valuable insights into the situation.
The metrics by which management is measured, and is given bonuses, usually have both a positive and a negative component. For example, net income has both a positive site, i.e. make more money, and a negative side, experience lower expenses or fewer losses. Revenues can be viewed as positive (write more business) or negative (lose fewer existing customers.)
Finally, do as many of the above-mentioned items at the same time as you can do effectively.
Grover Edie, MBA, FCAS, MAAA, CERA, CPCU, ARM was VP & Chief Actuary and Chief Risk Officer of two different insurance organizations. One was a multi-national group the other, a regional mutual.