Own Risk and Solvency Assessment (ORSA)
How the ORSA process helps insurers assess their own risk profile and capital adequacy.
ORSA Overview
The Own Risk and Solvency Assessment (ORSA) is a regulatory requirement for large insurance groups and individual insurers meeting certain premium thresholds. Adopted through the NAIC's Risk Management and ORSA Model Act, it requires insurers to conduct an internal assessment of their material risks, the sufficiency of their capital resources, and the quality of their risk management framework. The ORSA process is forward-looking and stress-test oriented, going beyond the static, formula-based approach of traditional RBC calculations to assess how the company's capital position would fare under adverse scenarios.
The ORSA requirement reflects a global trend toward risk-based supervision that emphasizes the insurer's own understanding and management of risk. Similar requirements exist under Solvency II in Europe and in other regulatory regimes worldwide. The ORSA complements the formulaic RBC framework by adding a qualitative and company-specific dimension to solvency assessment, recognizing that no single formula can capture the unique risk profile of every insurer.
The Three Sections of the ORSA Summary Report
The ORSA Summary Report, filed confidentially with regulators, consists of three main sections. Section 1 describes the company's risk management framework, including governance structure, risk identification and categorization processes, risk appetite and tolerance levels, and the integration of risk management into business decision-making. This section demonstrates to regulators that the company has a systematic, well-governed approach to identifying and managing risks.
Section 2 presents the risk assessment results. For each material risk category (insurance, market, credit, operational, and strategic risk), the company describes the risk, quantifies its potential impact, and discusses the mitigation strategies in place. The risk assessment should cover both normal operating conditions and stressed environments, showing how risks interact and potentially compound under adverse conditions. Actuaries typically lead the quantification of insurance and market risks, using models, scenario analysis, and stress testing to measure potential impacts.
Section 3 addresses group capital adequacy and prospective solvency. This section projects the company's capital position over a forward-looking period (typically three to five years) under baseline and stressed conditions. The projections incorporate the company's business plan, expected premium growth, investment strategy, and planned capital actions (dividends, capital contributions, reinsurance transactions). Stress scenarios test whether the company can maintain adequate capital even under adverse conditions, and reverse stress tests identify the scenarios that would cause the company to breach its capital targets or regulatory thresholds.
Risk Identification and Assessment
A comprehensive ORSA begins with systematic risk identification. This involves cataloging all material risks the company faces, including risks that may not be fully captured by the RBC formula. Common categories include insurance risk (adverse mortality, morbidity, or loss experience), market risk (interest rate, equity, credit spread, and currency movements), credit risk (counterparty default, including reinsurer and investment counterparties), operational risk (system failures, fraud, legal liability, regulatory changes), and strategic risk (competitive pressures, reputation damage, business model obsolescence).
For each identified risk, the company assesses both the probability and the potential severity, considering historical experience, current conditions, and forward-looking factors. The assessment should consider how risks interact: for example, a severe catastrophic event may simultaneously increase insurance losses, strain liquidity, impair asset values (if the event affects broader financial markets), and create operational challenges. These correlations are often the most important and the most difficult aspects of the risk assessment.
Stress Testing and Scenario Analysis
Stress testing is a central component of the ORSA. The company designs scenarios that test the resilience of its capital position under adverse conditions. Scenarios should be severe but plausible, representing events that could realistically occur even if they are unlikely in any given year. Common stress scenarios for P&C insurers include a major catastrophic event (hurricane, earthquake) combined with adverse reserve development, financial market stress (rising rates, equity market decline, credit spread widening), and a combination of underwriting and investment stresses.
For life insurers, relevant stress scenarios include a prolonged low interest rate environment (reducing investment income and increasing the cost of guarantees), a pandemic or mortality shock, a lapse event (mass surrenders triggered by rising rates or competitive pressures), and adverse disability or morbidity experience. Each scenario should quantify the impact on the company's capital position, identifying whether the company would breach regulatory minimums, internal targets, or rating agency thresholds.
Reverse stress testing works backward from a defined failure point (such as breaching the regulatory minimum capital or becoming unable to pay claims) and identifies the scenarios that would cause that failure. This exercise helps management understand the company's vulnerabilities and the distance between current conditions and potential failure. It often reveals non-obvious risk combinations that deserve additional mitigation attention.
Actuarial Role in ORSA
Actuaries are central to the ORSA process. They identify and quantify insurance risks, develop stress scenarios and reverse stress tests, project the company's capital position under various conditions, and evaluate the adequacy of reserves under stressed assumptions. The actuarial contribution extends beyond technical modeling to include judgment about the appropriateness of scenarios, the realism of assumptions, and the completeness of the risk identification process.
The ORSA process requires actuaries to work closely with risk management, finance, investment, and senior leadership teams. This cross-functional collaboration is one of the most valuable aspects of the ORSA: it forces a company-wide conversation about risk that transcends departmental boundaries. Actuaries who can communicate technical results in business language and facilitate productive discussions about risk and capital are particularly valuable in this process.
Regulatory Expectations and Best Practices
Regulators expect the ORSA to be a genuine reflection of the company's risk management practices, not a compliance exercise. The assessment should be integrated into business decision-making, with results informing strategic planning, capital allocation, and risk mitigation actions. Companies should update their ORSA at least annually, or more frequently if material changes in the risk profile occur. The board of directors should be actively engaged in the ORSA process, reviewing results and providing direction on risk appetite and tolerance.
Best practices include using multiple risk metrics (economic capital, TVaR, probability of ruin), testing a range of scenarios that cover different risk combinations, documenting assumptions and limitations transparently, and tracking actions taken in response to ORSA findings. Companies that treat the ORSA as a valuable management tool rather than a regulatory burden tend to develop stronger risk management capabilities and more resilient capital positions.
Study Relevance
ORSA topics appear on CAS exams covering enterprise risk management and on SOA exams in the Corporate Finance and ERM track. Candidates should understand the purpose and structure of the ORSA, the three sections of the summary report, the role of stress testing and scenario analysis, and how the ORSA complements the RBC framework. Understanding the conceptual framework is more important for exam purposes than detailed regulatory citations, though familiarity with the NAIC's ORSA Guidance Manual provides useful context for practice.