An article we published in mid-2017 gave an introduction to how credit rating agencies are factoring ERM into their ratings. For most organizations, the evaluation of ERM is simply folded into the overall review of the firm’s management and governance.
According to S&P:
ERM examines whether insurers execute risk management practices in a systematic, consistent, and strategic manner across the enterprise that effectively limits future losses within an optimal risk/reward framework.
In the original piece on this topic, I outlined the four major components of S&P’s evaluation of a company’s ERM process: 1). Risk Management Culture & Governance, 2). Risk Controls, 3). Emerging Risk Preparation, 4). Strategic Risk Management.
Each of these factors receives a positive, negative, or neutral rating. All analysis is evidence-based, so if there isn’t enough information available on a particular factor, S&P will issue a “neutral” rating, at least in the short-term.
There is an additional element for insurance companies. S&P also evaluates risk or capital modeling.
For insurance companies, modeling plays an important role in measuring risk exposures, quantifying capital requirements, and guiding future business decisions for underwriting practices. S&P’s evaluation looks at all types of risk models, including the insurer’s economic capital models if they are available.
The ultimate score an organization receives for its modeling is based on how well the insurer captures its material risk exposures and the interrelation between risks. Not only does S&P consider the breadth and quality of the models, they also look at methodology, the quality of the data going into the models (…think ‘garbage in, garbage out’), and even how results from modeling are used in decision-making.
Key note: Models receiving a positive score are also ones used extensively in the organization’s ERM process.
Regardless of its purpose, capital modeling shouldn’t be a big deal for insurers since they have been doing risk-based capital (RBC) analysis for at least the last 2 decades. In my previous life as an insurance regulator in Florida, we would do complex evaluations of RBC models based on this statute to ensure they accurately reflected the company’s surplus and risk exposure, which was important to keep track of since these surpluses represent the funds the insurer uses to pay claims in excess of loss reserves.
RBC analysis looks at finances…capital modeling included as part of ERM takes this purely financial analysis and produces results for use by the company’s management.
Once S&P completes its evaluation of all five components, it combines the classifications (positive, negative, and neutral) and gives the organization a score on a 5-point scale ranging from very strong, or most credit-supportive, to weak, or least credit-supportive.
Factoring ERM into the final credit score
Once S&P has the final ERM rating, they combine this score with an assessment of the organization’s management and governance and assign a rating on the same 5-point scale. As you can see in the table below, this combined score does consider the importance of ERM in its final rating.
S&P then matches this score to the company’s anchor rating, which in actuality is a combination of its business and financial risk profiles.
What impact does the ERM score have on the insurer’s ultimate credit rating?
The impact of ERM on a firm’s final credit score depends on a variety of factors…the impact isn’t uniform, even within the insurance industry.
Again, according to S&P:
The ultimate impact of ERM on a firm’s rating will depend on the risks of the firm, the susceptibility of the firm to those risks, and the capacity of the firm to absorb losses
Extending this to insurance companies, the significance of the ERM score on the final rating depends on the complexity of risks they are covering. The rating’s importance is higher for insurers covering complex risks that lead to either a significant loss of capital in a short amount of time (e.g., high-value property insurance) or risks that are uncertain over the long term (e.g., medical malpractice, workers’ comp).
On the other hand, the significance of the ERM score is low for insurance companies not exposed to these risks or who consistently maintain high levels of capital relative to the risk they are covering.
Is ERM considered a significant factor in your company’s ultimate credit rating? If so, has ERM’s importance on your rating been a motivating factor to further develop processes in your company?
I’m interested to hear your thoughts about ERM and its impact on credit ratings, so please feel free to leave a comment below or join the conversation on LinkedIn. Show others the growing influence of ERM both internally to a company and externally to regulators, ratings agencies, and others.
If your company feels like it needs to improve its ERM process in order to maintain or improve its credit ranking, please contact me to discuss your situation today. And remember, the possibility of an improved credit rating is minor compared to the benefits ERM can provide for addressing threats and opportunities in your organization.
Sign Up For Our Newsletter
Sign Up For Our Newsletter
Helping companies achieve their vision and strategy, and succeeding in today's turbulent world, is something I'm honored to be a part of. Whether you're an occasional blog visitor or a long-term client, thank you for letting us be a part of your journey.
Most Recent Posts
Without a doubt, one of my family’s favorite holidays is Christmas. Part of the fun, especially for our son, is seeing what “Santa” brought, but most importantly, we treasure the spirit of peace and goodwill the season brings. And after what seemed to be a never-ending warm spell, the weather is expected to be good…Read More
As the end of the year draws near, I think we’d all agree that while it wasn’t without its challenges, this year also wasn’t quite as turbulent as the previous two. While a lot of people are juggling company parties, shopping for friends and family, and special activities for the kids, most companies are putting…Read More
Strategic planning is a challenge – of all people, I understand… After all the meetings, risk and data analysis, and brainstorming of the preceding months, it’s tempting to think this is the end of the road and you can relax. Contrary to this common perception though, this is exactly not the time to relax, but…Read More
Be honest – have you ever done something that you soon realized was a real rookie mistake? Me raising my hand… Considering the nature of ERM’s role to ask questions and challenge assumptions (often during conversations with executives), it can be argued that, in at least some cases, the expectations bar for risk professionals is…Read More
On occasion, I like to take some of the concepts we risk professionals think about in our jobs and apply them to different personal situations…take some of the same concepts we use when working with executives to develop corporate strategy and manage risks or uncertainty around that strategy. It’s Thanksgiving week in the U.S. –…Read More
Periodically, I have the pleasure of speaking one-on-one with Hans Læssøe on a variety of topics around ERM, strategic risk, and other issues and trends. As you know from my previous conversations (here, here) and posts featuring his work, Hans was formerly a practitioner at the iconic LEGO Company, but even more notably, is a…Read More
Everyone likes a clear-cut template that offers an easy way to create or manage something…I mean what’s not to like about a step-by-step process for accomplishing what you want? Sometimes this can work without any issues, such as the case with the Project Management Book of Knowledge (PMBOK), ISO 9001 standard, or a new cooking…Read More
One thing I was taught to appreciate from a young age was the value of education and knowledge. It didn’t necessarily matter what the subject was, just that I always maintain a learning or growth mindset regardless of my current status in life. This mindset has served me well over the years, and it’s a…Read More
It’s amazing how technology has developed and changed our working world over time. Imagine trying to run my risk and strategy consulting firm without tools like Zoom, Box, Slack, and other ERM-specific technology tools. There is no way we would be able to serve our clients the way that we do. Just consider how the…Read More
If you’ve been handed the task of creating an ERM program for your organization, let me first offer my congratulations quickly followed by my empathy for the task ahead of you. I don’t say that to scare you but to provide a small dose of reality. Building, launching, and refining an ERM program that is…Read More