Summary The insurance CRO agenda differs from banking's in structure but shares the same discipline: a small number of load-bearing priorities held together by governance and reporting. This article sets out how to integrate solvency, underwriting, reserving and emerging risk into a coherent CRO agenda.
The four priorities Solvency defines the capital cushion the insurer holds against its obligations. Underwriting determines the risks the balance sheet accepts. Reserving translates those risks into liabilities on the books. Emerging risk — climate, cyber, regulatory, geopolitical — reshapes the assumptions underneath all three. A CRO who tracks each in isolation misses the interactions that matter.
Solvency Solvency II (or the equivalent regime) sets a floor. The insurer's own risk and solvency assessment (ORSA) sets the internal view. Governance around solvency includes SCR calculation and validation, own funds classification, model change control, and forward-looking projection under stress. Boards should see solvency as a position, a trajectory and a resilience story, not a single ratio.
Underwriting Underwriting governance covers pricing adequacy, portfolio composition, accumulation limits, and reinsurance strategy. Pricing discipline is where soft markets erode profitability quietly; the CRO's role is to make that erosion visible before it becomes a reserving problem.
Reserving Reserving translates uncertainty into numbers. Governance includes actuarial standards, independent review, uncertainty ranges, and management overlay controls. The reserving cycle should surface tension between actuarial best estimates and business expectations, rather than resolve it invisibly.
Emerging risk Emerging risk requires a horizon-scanning discipline and a bridge into existing governance. Climate is the most developed example: physical and transition risks translate into underwriting appetite, reserving assumptions and investment risk. Cyber underwriting introduces both product risk and correlation risk with the insurer's own operational exposure.
CRO and board implications Boards should expect an integrated view: how underwriting decisions feed reserving, how reserving assumptions affect solvency, how emerging risks reshape appetite. Fragmentation across actuarial, underwriting and risk committees is the most common weakness.
Practical implementation ORSA process aligned with strategy and business planning; underwriting governance with pricing adequacy MI; reserving governance with uncertainty ranges and overlay register; emerging risk register with owners and periodic board review; unified CRO report tying the four together.
Limitations Insurance liabilities are inherently long-tailed and uncertain. Governance manages the process; it does not produce point-precise answers.
Related reading See [Insurance Risk & Solvency](/expertise/insurance-risk), [Enterprise Risk](/expertise/enterprise-risk), [Model Risk](/expertise/model-risk) and [Regulatory Compliance](/expertise/regulatory-compliance).
Frequently asked questions
What should risk leaders know about the four priorities?
Solvency defines the capital cushion the insurer holds against its obligations. Underwriting determines the risks the balance sheet accepts. Reserving translates those risks into liabilities on the books. Emerging risk — climate, cyber, regulatory, geopolitical — reshapes the assumptions underneath all three. A CRO who tracks each in isolation misses the interactions that matter.
What should risk leaders know about solvency?
Solvency II (or the equivalent regime) sets a floor. The insurer's own risk and solvency assessment (ORSA) sets the internal view. Governance around solvency includes SCR calculation and validation, own funds classification, model change control, and forward-looking projection under stress. Boards should see solvency as a position, a trajectory and a resilience story, not a single ratio.
What should risk leaders know about underwriting?
Underwriting governance covers pricing adequacy, portfolio composition, accumulation limits, and reinsurance strategy. Pricing discipline is where soft markets erode profitability quietly; the CRO's role is to make that erosion visible before it becomes a reserving problem.
What should risk leaders know about reserving?
Reserving translates uncertainty into numbers. Governance includes actuarial standards, independent review, uncertainty ranges, and management overlay controls. The reserving cycle should surface tension between actuarial best estimates and business expectations, rather than resolve it invisibly.
What should risk leaders know about emerging risk?
Emerging risk requires a horizon-scanning discipline and a bridge into existing governance. Climate is the most developed example: physical and transition risks translate into underwriting appetite, reserving assumptions and investment risk. Cyber underwriting introduces both product risk and correlation risk with the insurer's own operational exposure.