Enterprise risk management and solvency under IRDAI

Actuarial Science (B.Sc) · General insurance and risk · free study notes for exams, placements and interviews

In short

Enterprise risk management (ERM) is the single, board-owned framework by which an insurer identifies, measures, controls and monitors *all* its risks together - underwriting, market, credit, liquidity, operational, strategic - instead of department by department. Solvency is the quantitative outcome of that framework: enough free capital in excess of liabilities to survive adverse experience and still pay claims. In India both are legally compelled: section 64VA of the Insurance Act, 1938 requires every insurer to maintain an excess of assets over liabilities, and IRDAI prescribes a control level of solvency of 1.5 times the required solvency margin, computed and reported quarterly. The topic is examined in Institute of Actuaries of India papers on general insurance and ERM (and the IFoA SP7/SA3 and CERA syllabi), in university B.Sc Actuarial Science and insurance papers, and is a standard interview area for actuarial, risk and finance roles at GIC Re, New India Assurance, ICICI Lombard, Bajaj Allianz, HDFC ERGO, Star Health, Tata AIG and at consultancies and reinsurance brokers.

Explained

The risk universe of a general insurer

Insurance (underwriting) risk - premiums prove inadequate, or claims and reserves develop worse than assumed. Split into premium risk (future exposure), reserve risk (past exposure, IBNR/IBNER run-off) and catastrophe risk (one event, many claims - cyclone, flood, earthquake).
Market risk - interest rate, equity, property, spread and currency movements change asset values more than liability values.
Credit (counterparty) risk - default by a reinsurer, a bank, a bond issuer, an intermediary holding premium, or non-recovery of government crop/health scheme receivables.
Liquidity risk - assets cannot be realised at fair value when a catastrophe produces a sudden claim outflow.
Operational risk - process failure, mis-selling, fraud (claims and premium), IT outage, cyber breach, key-person loss, outsourcing failure.
Strategic, reputational, group and conduct risk - wrong business mix, price war in motor or group health, mis-selling penalties, contagion from a parent.
Emerging risks - climate and Nat-Cat trend, cyber accumulation, pandemic, regulatory change, AI model risk, medical inflation.
Risks are also classified as diversifiable vs systematic, frequency vs severity, short-tail (fire, motor OD) vs long-tail (motor third-party, liability), and quantifiable vs non-quantifiable (the latter managed by controls, not capital).

The ERM framework and governance under IRDAI

Board accountability. Under the IRDAI (Corporate Governance for Insurers) Regulations, 2024 (which replaced the 2016 corporate governance guidelines) the board owns the risk management strategy and must constitute a Risk Management Committee, alongside Audit, Investment, Policyholder Protection and Grievance Redressal, and Nomination & Remuneration committees.
Chief Risk Officer (CRO) - a Key Management Person, independent of revenue-earning functions, who maintains the risk register, reports to the Risk Management Committee, and must not combine the role with CFO or Appointed Actuary.
Appointed Actuary - statutorily required; certifies liabilities (IBNR, IBNER, premium deficiency reserve, unexpired risk reserve), solvency and pricing, and submits the annual Financial Condition Report including stress tests. Governed by IRDAI's consolidated actuarial regulations and by the Institute of Actuaries of India's Actuarial Practice Standards.
Three lines of defence - (1) business units own and manage risk day to day; (2) risk management and compliance set policy, challenge and aggregate; (3) internal audit gives independent assurance. Statutory audit and IRDAI inspection sit outside as a fourth layer.
Risk appetite statement - the board's own words plus limits: e.g. "maintain solvency above 1.8x in a 1-in-200 year event", "net retained loss from one catastrophe not to exceed 10% of net worth", "combined ratio below 102%".
Risk appetite vs tolerance vs limit - appetite is how much risk the firm *wants*; tolerance is the outer boundary it can bear; limits are the operational caps delegated to underwriters and investment managers.
Voluntary frameworks used alongside - ISO 31000:2018 (risk management guidelines, not a certifiable standard), COSO ERM 2017, and the IAIS Insurance Core Principles, notably ICP 16 (ERM for solvency purposes) and ICP 17 (capital adequacy).

The ERM cycle, step by step

Identify - risk workshops, loss-event database, scenario brainstorming, emerging-risk scanning; output is the risk register (risk, owner, cause, control, inherent and residual rating).
Assess and measure - likelihood × impact scoring for a heat map; stochastic models (loss distributions, Nat-Cat vendor models), VaR and TVaR for quantifiable risks; scenario and stress tests for the rest.
Respond - the four T's: Treat (controls, underwriting rules), Transfer (reinsurance, hedging, insurance, outsourcing), Terminate (stop writing the line), Tolerate (accept and hold capital).
Monitor - key risk indicators (KRIs): solvency ratio, claims ratio by segment, reserve development triangles, lapse/renewal ratio, large-loss count, grievance ratio, investment limit breaches.
Report - dashboards to the Risk Management Committee and board; quarterly solvency returns and annual filings to IRDAI; public disclosures in the annual report.
Own Risk and Solvency Assessment (ORSA) - the insurer's own forward-looking view of all material risks and the capital needed over its business plan horizon, independent of the regulatory formula. It is the ICP 16/Solvency II Pillar 2 centrepiece; Indian insurers perform ORSA-type self-assessment and stress testing, and a formal ORSA is expected to become explicit as India moves to risk-based capital.
Stress vs scenario vs reverse stress testing - a stress moves one variable (claims +20%); a scenario is a coherent multi-variable story (cyclone plus equity fall plus reinsurer default); a reverse stress test asks what event would break the firm.

Statutory solvency under the Insurance Act and IRDAI

Minimum paid-up equity capital (Insurance Act, 1938, s.6): ₹100 crore for a life, general or health insurer and ₹200 crore for a reinsurer. Foreign investment is permitted up to 74% following the Insurance (Amendment) Act, 2021; a proposal to move to 100% with a composite licence has been announced but should not be treated as enacted law unless verified.
Section 64VA requires assets to exceed liabilities by the required solvency margin at all times; IRDAI prescribes the control level of solvency = 1.5 (150%). The detailed rules now sit in the IRDAI (Actuarial, Finance and Investment Functions of Insurers) Regulations, 2024, which consolidated the earlier Assets, Liabilities and Solvency Margin (2016) and Investment (2016) regulations.
Solvency Ratio = ASM / RSM.
- ASM (Available Solvency Margin) = value of admissible assets *less* the value of liabilities (policy liabilities plus other liabilities), both valued on the regulatory basis - assets at prescribed values with inadmissible assets (e.g. long-outstanding agents' balances, certain deferred items) excluded and specified haircuts applied.
- RSM (Required Solvency Margin) = the higher of a premium-based and a claims-based figure, computed segment-wise with prescribed factors, subject to an absolute floor.
Breach consequences - falling below 1.5 obliges the insurer to report to IRDAI and submit a financial plan; IRDAI may direct a capital infusion, restrict new business, bar dividends, or in the extreme appoint an administrator under the Insurance Act. Insurers are outside the Insolvency and Bankruptcy Code; resolution is through the Insurance Act and IRDAI.
Reporting - solvency is certified quarterly and annually by the Appointed Actuary and auditor and filed with IRDAI; the ratio is publicly disclosed, so it functions as a market-discipline tool (Solvency II Pillar 3 logic).
Why 1.5 and not 1.0 - the RSM is itself a cushion; the extra 50% is a buffer giving the regulator time to intervene before assets fall below liabilities, and absorbs valuation and reserving error.

Factor-based versus risk-based capital

India's RSM is a factor-based (volume) formula: capital scales with premiums and claims by line of business. Simple, auditable, hard to game - but it is blind to asset risk, to concentration, to reinsurance quality and to diversification, and it rewards a large book regardless of how risky it is.
Solvency II (EU) three pillars - Pillar 1 quantitative (SCR calibrated to 99.5% VaR of own funds over one year, plus a lower MCR, with a market-consistent balance sheet and risk margin); Pillar 2 governance, ORSA and supervisory review; Pillar 3 disclosure. The Swiss Solvency Test and Canada's LICAT use TVaR (e.g. 99% expected shortfall) instead of VaR; the US uses NAIC RBC factors.
India's direction - IRDAI has been developing a risk-based capital (RBC) regime with quantitative impact studies, alongside Ind AS 117 (the Indian equivalent of IFRS 17) for insurance contract accounting. Target implementation dates have been revised more than once, so the current statutory basis remains the factor-based RSM with a 1.5 control level; treat any RBC/Ind AS 117 start date as to be confirmed from the latest IRDAI circular.
Economic capital - the insurer's internal answer: capital needed so that the probability of ruin over a chosen horizon is below a chosen level, using its own distributions and correlations. Normally differs from, and is compared with, the regulatory RSM in the ORSA.

Capital, risk-mitigation and the regulatory levers

Reinsurance - proportional (quota share, surplus) and non-proportional (excess of loss, stop loss, catastrophe XL) treaties reduce net exposure and therefore RSM - but credit is capped: the prescribed factors A and B stop net premiums/claims being recognised below a floor fraction of gross, so a firm cannot buy its way to zero capital. Reinsurance converts insurance risk into counterparty credit risk. The IRDAI (Reinsurance) Regulations, 2018 set the order of preference for cessions and an obligatory cession to GIC Re fixed by IRDAI each year (4% in recent years - confirm the current notification).
Investment rules (regulatory ALM): a general insurer's portfolio must hold prescribed minimum proportions - broadly Central Government securities not less than 20%, all government and other approved securities not less than 30%, housing and infrastructure not less than 15%, with "other investments" capped (around 25%). Exposure limits apply per investee, group and industry. Verify the exact percentages against the current investment schedules.
Expenses of Management (EOM) - IRDAI caps EOM including commission for general insurers at about 30% of gross written premium in India (higher, around 35%, for standalone health insurers), with allowances for specified items; breaches hit the profit and loss account and attract supervisory action. This is a direct control on expense risk.
ALM - matching duration and cash flows of assets to liabilities; short for motor OD and fire, long for motor third-party and liability.
Other levers - subordinated debt and preference shares as capital (within IRDAI's "other forms of capital" limits), catastrophe modelling for Nat-Cat accumulation, underwriting authority limits, fraud analytics, business continuity and cyber-security policy, and the Policyholders' Protection framework.

Advantages, limitations and comparisons

Advantages of ERM - one aggregated view allows diversification credit; capital is allocated to the lines that earn their cost of capital; it links pricing, reserving, reinsurance and investment decisions; it is what rating agencies and the regulator examine.
Limitations - model risk and false precision; dependence on scarce Indian data (especially Nat-Cat and liability); correlations that rise in a crisis; procyclicality of market-consistent valuation; the risk that ERM degenerates into a compliance document no decision-maker reads.
Factor-based vs risk-based - the former is cheap and comparable; the latter is risk-sensitive and incentive-correct but demands data, models and validation capacity.
VaR vs TVaR - VaR is a quantile and ignores how bad the tail is; TVaR averages the tail, is coherent (sub-additive), and is preferred for catastrophe-exposed books.

Key points

ERM - a single board-owned framework covering all risks, their interactions and the capital they need.
Solvency Ratio - ASM ÷ RSM; IRDAI's control level is 1.5 (150%), reported quarterly.
Section 64VA, Insurance Act, 1938 - the statutory requirement for assets to exceed liabilities by the required margin.
ASM - admissible assets minus liabilities, on the prescribed regulatory valuation basis.
RSM - higher of the premium-based (RSM-1) and claims-based (RSM-2) figures, with an absolute floor (₹50 crore for an insurer; ₹100 crore for a reinsurer).
Factors A and B - segment-specific floors on reinsurance credit; net cannot be taken below factor × gross.
Minimum capital - ₹100 crore for an insurer, ₹200 crore for a reinsurer; FDI up to 74%.
Key regulations (2024 consolidation) - IRDAI (Actuarial, Finance and Investment Functions of Insurers) Regulations, 2024 and IRDAI (Corporate Governance for Insurers) Regulations, 2024.
Risk Management Committee and CRO - mandatory; CRO independent of revenue functions and distinct from CFO and Appointed Actuary.
Three lines of defence - business, risk/compliance, internal audit.
Risk appetite vs tolerance vs limits - desired, bearable, delegated.
ORSA - the insurer's own forward-looking solvency self-assessment, the heart of ICP 16 and Solvency II Pillar 2.
Solvency II pillars - quantitative (SCR at 99.5% one-year VaR, MCR), governance/ORSA, disclosure.
Economic capital - risk measure of the loss distribution minus expected loss, on the firm's own basis.
TVaR - coherent tail measure, always at least VaR at the same level; used by SST and LICAT.
Diversification benefit - aggregate capital is less than the sum of stand-alone capitals whenever correlations are below 1.
Reinsurance - reduces RSM but creates counterparty credit risk; obligatory cession to GIC Re set annually by IRDAI.
Breach of 1.5 - report, financial plan, possible restriction on new business, dividends or an administrator; the IBC does not apply to insurers.

Formulas and examples

Solvency Ratio = ASM / RSM. Control level = 1.5. Dimensionless (often quoted as a %).
ASM = Value of admissible assets − Value of liabilities (policy + other), in ₹ crore.
RSM-1 (premium basis) = 0.20 × Σ over segments i of max( GWP_i × A_i , NWP_i )
RSM-2 (claims basis) = 0.30 × Σ over segments i of max( GIC_i × B_i , NIC_i )
RSM = max(RSM-1, RSM-2), subject to the prescribed minimum.

GWP/NWP = gross/net written premium; GIC/NIC = gross/net incurred claims (₹ crore); A_i, B_i = prescribed segment factors between 0 and 1 (the reinsurance-credit floor; they differ by line of business - take the current values from the regulations, do not assume one number for all lines).

Capital injection needed = 1.5 × RSM − ASM (if positive), ₹ crore.
Unexpired Risk Reserve (statutory basis) = 50% of net premium for fire and miscellaneous business, 100% for marine hull.
VaR at level p: VaR_p = inf{ x : P(L ≤ x) ≥ p }. For L ~ Normal(μ, σ): VaR_p = μ + z_p σ.
TVaR_p = E[L | L > VaR_p]. For the Normal: TVaR_p = μ + σ · φ(z_p)/(1 − p), φ = standard normal density.
Economic capital = Risk measure of loss at chosen level − Expected loss (₹ crore).
Aggregate capital with a correlation matrix: SCR = √( Σ_i Σ_j ρ_ij · C_i · C_j ), C_i = stand-alone capital for risk i.
Combined ratio = (incurred claims + expenses of management) / net earned premium; above 100% means an underwriting loss, funded by investment income.

Example 1 - segment-wise RSM for a general insurer (illustrative factors A and B; amounts in ₹ crore)

Segment	GWP	A	GWP×A	NWP	max → RSM-1 at 20%	GIC	B	GIC×B	NIC	max → RSM-2 at 30%
Fire	200	0.50	100	110	110 → 22.00	120	0.50	60	70	70 → 21.00
Marine cargo	50	0.60	30	28	30 → 6.00	30	0.60	18	16	18 → 5.40
Motor	600	0.85	510	540	540 → 108.00	500	0.85	425	450	450 → 135.00
Health	300	0.85	255	240	255 → 51.00	250	0.85	212.5	200	212.5 → 63.75
Total					187.00					225.15

RSM = max(187.00, 225.15) = ₹225.15 crore, which is above the ₹50 crore floor.
Note where the factor bites: in fire and motor the *net* figure was higher, so the factor did nothing; in marine cargo and health the ceded share was large enough that only factor × gross could be used.

Example 2 - solvency ratio and the capital gap. The same insurer holds admissible assets of ₹1,450 crore against total liabilities of ₹1,150 crore.

ASM = 1,450 − 1,150 = ₹300 crore.
Solvency Ratio = 300 / 225.15 = 1.332 (133.2%) - below the 1.5 control level, so a reportable breach.
Capital needed = 1.5 × 225.15 − 300 = 337.73 − 300 = ₹37.73 crore, raised by equity infusion, by reducing liabilities, or by cutting RSM (writing less motor/health or buying more reinsurance subject to the factor floors).

Example 3 - why heavy reinsurance cannot zero out capital. Fire GWP ₹200 crore, 80% ceded, so NWP = ₹40 crore, factor A = 0.50.

RSM-1 = 0.20 × max(200 × 0.50, 40) = 0.20 × max(100, 40) = 0.20 × 100 = ₹20 crore.
Had the insurer retained ₹100 crore (50% cession), RSM-1 would also be 0.20 × 100 = ₹20 crore. Ceding beyond 50% buys no further solvency relief on this line, while adding reinsurer credit risk.

Example 4 - economic capital from a loss distribution. Annual aggregate claims are modelled as Normal with mean ₹500 crore and standard deviation ₹120 crore (z at 99.5% = 2.576; φ(2.576) = 0.01447).

VaR₉₉.₅ = 500 + 2.576 × 120 = 500 + 309.1 = ₹809.1 crore; economic capital over the expected loss = ₹309.1 crore.
TVaR₉₉.₅ = 500 + 120 × (0.01447 / 0.005) = 500 + 120 × 2.895 = 500 + 347.4 = ₹847.4 crore; capital on the TVaR basis = ₹347.4 crore, about 12% more than VaR - the premium for measuring the whole tail rather than one point. (The Normal is used for arithmetic clarity; real general-insurance aggregates are right-skewed, so lognormal or compound Poisson models give fatter tails.)

Example 5 - diversification benefit. Stand-alone capital: insurance risk ₹100 crore, market risk ₹80 crore, correlation 0.5.

Aggregate = √(100² + 80² + 2 × 0.5 × 100 × 80) = √(10,000 + 6,400 + 8,000) = √24,400 = ₹156.2 crore.
Simple sum = ₹180 crore, so the diversification benefit is ₹23.8 crore (13.2%). A factor-based RSM gives no such credit; a risk-based or internal model does.

Where it is used

General and health insurers - ICICI Lombard, Bajaj Allianz General, HDFC ERGO, Tata AIG, New India Assurance, Star Health: actuarial and risk teams compute quarterly solvency, run the ORSA-type stress tests and set the reinsurance programme.
Reinsurance - GIC Re and foreign reinsurance branches in India price catastrophe treaties and hold capital for accumulation risk; brokers (Marsh, Aon, Howden) sell reinsurance as capital relief.
Appointed Actuary and Chief Risk Officer functions - statutory certification of liabilities and solvency, the Financial Condition Report, the risk register and the board risk dashboard.
Consulting, audit and rating - Milliman, WTW, Deloitte, EY, KPMG and rating agencies (CARE, ICRA, AM Best) review solvency, reserves and ERM maturity.
Government-linked schemes - PMFBY crop insurance and Ayushman Bharat/PMJAY-linked group health bring concentration, basis and receivable-credit risk that must be capitalised and stress-tested.
Adjacent regulated sectors - banks under RBI's Basel III ICAAP, NBFCs, and pension funds under PFRDA use the same ERM vocabulary, so the skills transfer across risk-management roles.

Interview questions

Q: What exactly is the solvency ratio an Indian insurer must maintain? A: Available Solvency Margin divided by Required Solvency Margin, which IRDAI requires to be at least 1.5 (150%) at all times, reported quarterly under section 64VA of the Insurance Act, 1938.
Q: How is RSM computed for general insurance? A: Segment-wise as the higher of a premium basis (20% of the greater of gross premium × factor A and net premium) and a claims basis (30% of the greater of gross incurred claims × factor B and net incurred claims), subject to a prescribed minimum.
Q: Why are the factors A and B there at all? A: They floor the credit given for reinsurance, so an insurer cannot reduce its required capital without limit by ceding almost everything and substituting counterparty credit risk.
Q: Does buying more reinsurance always improve the solvency ratio? A: No - once net falls below factor × gross the RSM stops falling, while the reinsurance premium reduces ASM and adds credit risk, so the ratio can worsen.
Q: Difference between risk appetite and risk tolerance? A: Appetite is the amount and type of risk the board *wants* to take in pursuit of its plan; tolerance is the maximum deviation it can absorb before action is forced.
Q: What is ORSA and how does it differ from the statutory solvency calculation? A: ORSA is the insurer's own forward-looking assessment of all material risks and the capital they need over the business-plan horizon, using its own models; the statutory calculation is a prescribed backward-looking volume formula.
Q: Factor-based versus risk-based capital - which is India on? A: India is still on the factor-based RSM with a 1.5 control level; IRDAI has been running a risk-based capital project alongside Ind AS 117, with implementation dates that have been revised, so the current basis remains factor-based.
Q: Why do regulators increasingly prefer TVaR to VaR? A: VaR says nothing about losses beyond the quantile and is not sub-additive; TVaR averages the whole tail, is a coherent risk measure and better reflects catastrophe exposure.
Q: Name the three lines of defence and who owns risk in each. A: Business units own and manage risk; risk management and compliance set the framework and challenge; internal audit provides independent assurance to the board.
Q: An insurer's solvency is 1.35. What happens? A: It is a breach of the control level - it must report to IRDAI and submit a financial plan, and IRDAI can require capital infusion and restrict new business, dividends or management, up to appointing an administrator.
Q: How does a catastrophe affect both sides of the solvency calculation? A: Gross and net incurred claims rise, raising RSM on the claims basis, while assets are consumed to pay claims and may also have fallen in value - so ASM falls as RSM rises and the ratio drops twice over.
Q: Where does operational risk get capital in the Indian formula? A: It does not get an explicit charge in the premium/claims-based RSM; it is managed through governance, controls and the insurer's own economic-capital assessment, and would attract an explicit charge under a risk-based regime.

Common mistakes

Treating the solvency ratio as ASM ÷ liabilities, or as a simple assets-to-liabilities ratio, instead of ASM ÷ RSM.
Taking RSM as the sum of RSM-1 and RSM-2 rather than the higher of the two totals, or picking the higher segment-by-segment instead of on the totals.
Ignoring the factor A / factor B floor and crediting the full net premium or net claims, which understates RSM for a heavily reinsured book.
Quoting one blanket value for the A and B factors; they are specified per line of business and have been revised - look them up.
Confusing capital requirement levels: minimum paid-up capital (₹100 crore), the RSM, and the 1.5 control level are three different things.
Describing India as being on Solvency II or on an IFRS 17 basis already; the statutory regime is still factor-based RSM, and Ind AS 117 timelines have shifted.
Adding stand-alone capital charges without a correlation matrix (overstating capital), or assuming zero correlation in a stress (understating it).