Insurance Risk

The insurance CRO agenda: solvency, underwriting, reserving and emerging risk

How an insurance Chief Risk Officer should integrate solvency, underwriting, reserving and emerging-risk priorities into a coherent agenda.

By Jonas Adam Mohamed Osman AbdelghafourPublished 18 June 2026

Summary

The insurance CRO agenda differs from banking's in structure but shares the same discipline: a small number of load-bearing priorities held together by governance and reporting. This article sets out how to integrate solvency, underwriting, reserving and emerging risk into a coherent CRO agenda.

The four priorities

Solvency defines the capital cushion the insurer holds against its obligations. Underwriting determines the risks the balance sheet accepts. Reserving translates those risks into liabilities on the books. Emerging risk — climate, cyber, regulatory, geopolitical — reshapes the assumptions underneath all three. A CRO who tracks each in isolation misses the interactions that matter.

Solvency

Solvency II (or the equivalent regime) sets a floor. The insurer's own risk and solvency assessment (ORSA) sets the internal view. Governance around solvency includes SCR calculation and validation, own funds classification, model change control, and forward-looking projection under stress. Boards should see solvency as a position, a trajectory and a resilience story, not a single ratio.

Underwriting

Underwriting governance covers pricing adequacy, portfolio composition, accumulation limits, and reinsurance strategy. Pricing discipline is where soft markets erode profitability quietly; the CRO's role is to make that erosion visible before it becomes a reserving problem.

Reserving

Reserving translates uncertainty into numbers. Governance includes actuarial standards, independent review, uncertainty ranges, and management overlay controls. The reserving cycle should surface tension between actuarial best estimates and business expectations, rather than resolve it invisibly.

Emerging risk

Emerging risk requires a horizon-scanning discipline and a bridge into existing governance. Climate is the most developed example: physical and transition risks translate into underwriting appetite, reserving assumptions and investment risk. Cyber underwriting introduces both product risk and correlation risk with the insurer's own operational exposure.

CRO and board implications

Boards should expect an integrated view: how underwriting decisions feed reserving, how reserving assumptions affect solvency, how emerging risks reshape appetite. Fragmentation across actuarial, underwriting and risk committees is the most common weakness.

Practical implementation

ORSA process aligned with strategy and business planning; underwriting governance with pricing adequacy MI; reserving governance with uncertainty ranges and overlay register; emerging risk register with owners and periodic board review; unified CRO report tying the four together.

Limitations

Insurance liabilities are inherently long-tailed and uncertain. Governance manages the process; it does not produce point-precise answers.

Related reading

See Insurance Risk & Solvency, Enterprise Risk, Model Risk and Regulatory Compliance.

Frequently asked questions

What should risk leaders know about the four priorities?

Solvency defines the capital cushion the insurer holds against its obligations. Underwriting determines the risks the balance sheet accepts. Reserving translates those risks into liabilities on the books. Emerging risk — climate, cyber, regulatory, geopolitical — reshapes the assumptions underneath all three. A CRO who tracks each in isolation misses the interactions that matter.

What should risk leaders know about solvency?

Solvency II (or the equivalent regime) sets a floor. The insurer's own risk and solvency assessment (ORSA) sets the internal view. Governance around solvency includes SCR calculation and validation, own funds classification, model change control, and forward-looking projection under stress. Boards should see solvency as a position, a trajectory and a resilience story, not a single ratio.

What should risk leaders know about underwriting?

Underwriting governance covers pricing adequacy, portfolio composition, accumulation limits, and reinsurance strategy. Pricing discipline is where soft markets erode profitability quietly; the CRO's role is to make that erosion visible before it becomes a reserving problem.

What should risk leaders know about reserving?

Reserving translates uncertainty into numbers. Governance includes actuarial standards, independent review, uncertainty ranges, and management overlay controls. The reserving cycle should surface tension between actuarial best estimates and business expectations, rather than resolve it invisibly.

What should risk leaders know about emerging risk?

Emerging risk requires a horizon-scanning discipline and a bridge into existing governance. Climate is the most developed example: physical and transition risks translate into underwriting appetite, reserving assumptions and investment risk. Cyber underwriting introduces both product risk and correlation risk with the insurer's own operational exposure.