International ERM Glossary

The International ERM Glossary is intended to provide users with a set of definitions that are in common usage around the world by actuaries, regulators and members of the insurance industry. The purpose in developing the glossary is to help provide a common understanding of the terms currently in use, as definitions and meanings have varied over time, and among practitioners. It can also be used as a training and educational tool for regulators.

The glossary can be consulted per letter, organization or grouping.

DISCLAIMER: The content of the International ERM Glossary has been compiled by the Joint ORSA Subcommittee of the Insurance Regulation Committee and the Enterprise and Financial Risk Committee of the IAA. This information has been collated and presented for educational and informational purposes to the members of the IAA and interested parties. The IAA assumes no responsibility for the accuracy, completeness, currency, reliability of the information in the International ERM Glossary or access to any information contained on any of the sources cited in the Glossary. The IAA, its employees and officers shall not be liable for any loss or damage, direct or indirect, which may arise or occur as a result of the use of or reliance upon any of the material in the International ERM Glossary.

Glossary
TermGroupingOrganization or Jurisdiction Defining TermSource of DefinitionDefinition
Regulatory RiskRisk CategoriesInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesThe risk arising from changes in regulation or legislationR
Reputational RiskRisk CategoriesChinaCIRC C-ROSS Conceptual FrameworkThe risk of losses due to negative evaluation of insurance undertakings by relevant stakeholders resulting from the insurance undertakings operation or external events.R
Reputational RiskRisk CategoriesInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesThe risk that events could have an adverse impact on an organisation's reputation or brand value.R
Reputational RiskRisk CategoriesInternational Risk Management InstituteIRMI TermsThe risk that negative publicity regarding an institution's business practices will lead to a loss of revenue or increased litigation.R
Reputational RiskRisk CategoriesThe European Economic AreaCEA Solvency IIType of business risk. The risk that adverse publicity regarding an insurer's business practices and associations, whether accurate or not, will cause a loss of confidence in the integrity of the institution.R
Residual RiskRisk CategoriesInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesThe risk remaining with an organisation following its risk management process and internal controls.R
Reverse Stress TestingMethodsCOSOCOSOThe possibility that events will occur and affect the achievement of strategy and business objectivesR
Reverse Stress TestingMethodsIAISIAIS ICP 16Reverse stress testing identifies scenarios that are most likely to cause an insurer to fail. Such an approach may help to ensure adequate focus on the management actions that are appropriate to avoid undue risk of business failure. The focus of such reverse stress testing may be largely qualitative in nature although broad assessment of associated financial impacts may help in deciding the appropriate action to take.R
Reverse Stress TestingMethodsInternational Actuarial AssociationIAA ISAPA process for  identifying events or scenarios that would lead to a predetermined financial indicator  for an organization (draft)R
Reverse Stress TestingMethodsThe European Economic AreaSolvency IIThe term is mentioned in the Guidelines on the ORSA, but has not been defined explicitly.R
RiskRisk CategoriesCOSOCOSOThe possibility that events will occur and affect the achievement of strategy and business objectivesR
RiskRisk CategoriesInternational Actuarial AssociationIAA Deriving Value from ORSAThe potential of future losses or shortfalls from expectations due to the deviation of actual from expected results.R
RiskRisk CategoriesUnited StatesU.S. ASB TermsThe potential of future losses or shortfalls from expectations due to deviation of actual results from expected results.R
Risk AppetiteGeneralCOSOCOSOThe types and amount of risk, on a broad level, an organization is willing to accept in pursuit of value.R
Risk AppetiteGeneralFinancial Stability BoardFSB Principles for an Effective Risk AppetiteThe aggregate level and types of risk a financial institution is willing to assume within its risk capacity to achieve its strategic objectives and business plan. R
Risk AppetiteGeneralIAISIAIS Supervisory MaterialThe aggregate level and types of risk an insurer is willing to assume within its risk capacity to achieve its strategic objectives and business plan.R
Risk AppetiteGeneralInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesThe level and type of risk that an organization is willing to accept in order to achieve its objectives.R
Risk AppetiteGeneralInternational Actuarial AssociationIAA Deriving Value from ORSAThe level of aggregate risk that a company chooses to take in pursuit of its objectives.R
Risk AppetiteGeneralInternational Risk Management InstituteIRMI TermsThe degree to which an organization's management is willing to accept the uncertainty of loss for a given risk when it has the option to pay a fixed sum to transfer that risk to an insurer.R
Risk AppetiteGeneralUnited StatesNAIC ORSA MANUALDocuments the overall principles that a company follows with respect to risk-taking, given its business strategy, financial soundness objectives and capital resources. Often stated in qualitative terms, a risk appetite defines how an organization weighs strategic decisions and communicates its strategy to key stakeholders with respect to risk-taking. It is designed to enhance management's ability to make informed and effective business decisions while keeping risk exposures within acceptable boundaries.R
Risk AppetiteGeneralUnited StatesU.S. ASB TermsThe level of aggregate risk that an organization chooses to take in pursuit of its objectives.R
Risk Appetite FrameworkGeneralFinancial Stability BoardFSB Principles for an Effective Risk AppetiteThe overall approach, including policies, processes, controls, and systems through which risk appetite is established, communicated, and monitored. It includes a risk appetite statement, risk limits, and an outline of the roles and responsibilities of those overseeing the implementation and monitoring of the RAF. The RAF should consider material risks to the financial institution, as well as to the institution's reputation vis-à-vis policyholders, depositors, investors and customers. The RAF aligns with the institution's strategy R
Risk Appetite StatementGeneralFinancial Stability BoardFSB Principles for an Effective Risk AppetiteThe articulation in written form of the aggregate level and types of risk that a financial institution is willing to accept, or to avoid, in order to achieve its business objectives. It includes qualitative statements as well as quantitative measures expressed relative to earnings, capital, risk measures, liquidity and other relevant measures as appropriate. It should also address more difficult to quantify risks such as reputation and conduct risks as well as money laundering and unethical practices. R
Risk CapacitySolvency termsFinancial Stability BoardFSB Principles for an Effective Risk AppetiteThe maximum level of risk the financial institution can assume given its current level of resources before breaching constraints determined by regulatory capital and liquidity needs, the operational environment (e.g. technical infrastructure, risk management capabilities, expertise) and obligations, also from a conduct perspective, to depositors, policyholders, shareholders, fixed income investors, as well as other customers and stakeholders. R
Risk CapacitySolvency termsInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesThe extent of risk that an organisation is capable of undertakingR
Risk CapitalSolvency termsInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesRisk Based Capital (RBC) Capital Requirements that reflect the risk profile of the financial institutions.R
Risk CapitalSolvency termsInternational Risk Management InstituteIRMI TermsCapital required to finance the consequences of business risks.R
Risk CapitalSolvency termsThe European Economic AreaSolvency IIThe term is mentioned once in de Directive (Solvency II Directive (50)), but has not been defined.R
Risk CapitalSolvency termsUnited StatesNAIC ORSA MANUALAn amount of capital calculated to be sufficient to withstand adverse outcomes associated with various risks of an enterprise, up to a pre-defined security standard.R
Risk ExposureGeneralThe European Economic AreaSolvency IIThe term is mentioned in de Directive, but has not been defined explicitly.R
Risk ExposureGeneralUnited StatesNAIC ORSA MANUALFor each risk listed in the company's risk profile, the amount the company stands to lose due to that particular risk at a particular time, as indicated by a chosen metric.R
Risk LimitGeneralCOSOCOSOThe maximum amount of risk that an entity is able to absorb in the pursuit of strategy and business objectives.R
Risk LimitGeneralFinancial Stability BoardFSB Principles for an Effective Risk AppetiteQuantitative measures based on forward looking assumptions that allocate the financial institution's aggregate risk appetite statement (e.g. measure of loss or negative events) to business lines, legal entities as relevant, specific risk categories, concentrations, and as appropriate, other levels. R
Risk LimitGeneralIAISIAIS Supervisory MaterialThe level of risk to which the insurer is prepared to be exposed. The risk measure might be a supervisory one or an internal one or a combination of both.R
Risk LimitGeneralInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesThe maximum amount of risk that can be underwritten. Risk limits will often be identified for key risk-taking activities such as insurance underwriting and investment.R
Risk LimitGeneralUnited StatesNAIC ORSA MANUALTypically quantitative boundaries that control the amount of risk that a company takes. Risk limits are typically more granular than risk tolerances and may be expressed at various levels of aggregation: by type of risk, category within a type of risk, product or line of business, or some other level of aggregation. Risk limits should be consistent with the company's overall risk tolerance.R
Risk LimitGeneralUnited StatesU.S. ASB TermsA threshold used to monitor the actual risk expousre of a specific unit or units of the organization to ensure that the level of aggregate risk remains within the risk tolerance.R
Risk ProfileGeneralCOSOCOSOA composite view of the risk assumed at a particular level of the entity, or aspect of the business model that positions management to consider the types, severity, and interdependencies of risks, and how they may affect performance relative to its strategy and business objectives.R
Risk ProfileGeneralFinancial Stability BoardFSB Principles for an Effective Risk AppetitePoint in time assessment of the financial institution's gross and, as appropriate, net risk exposures (after taking into account mitigants) aggregated within and across each relevant risk category based on forward looking assumptions. R
Risk ProfileGeneralInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesA description of the risk exposures of an organization.R
Risk ProfileGeneralInternational Actuarial AssociationIAA Deriving Value from ORSAThe characteristics of the material and relevant risks to which a company is exposed over a specified period of time.R
Risk ProfileGeneralThe European Economic AreaSolvency IIThe term is used a lot in de Directive, but has not been defined explicitly.R
Risk ProfileGeneralUnited StatesNAIC ORSA MANUALA delineation and description of the material risks to which an organization is exposed.R
Risk ToleranceGeneralIAISIAIS Supervisory MaterialUsed to include the active retention of risk that is appropriate for an insurer in the context of its strategy, financial strength, and the nature, scale and complexity of its business and risks. Risk tolerance is typically a percentage of the absolute risk bearing capacity for an insurer.R
Risk ToleranceGeneralInternational Actuarial AssociationIAA - Acturial Aspects of ERM for Insurance CompaniesA quantitative description of the extent of risk that the company is willing to take in respect of a specific risk.R
Risk ToleranceGeneralInternational Risk Management InstituteIRMI TermsThe willingness of an organization to incur risk to gain future reward.R
Risk ToleranceGeneralThe European Economic AreaSolvency IIThe term risk tolerance limit is used in de Directive itself and Guidelines on the ORSA, but has not been defined explicitly. (Solvency II Directive art. 45 on ORSA)R
Risk ToleranceGeneralUnited StatesNAIC ORSA MANUALThe company's qualitative and quantitative boundaries around risk-taking, consistent with its risk appetite. Qualitative risk tolerances are useful to describe the company's preference for, or aversion to, particular types of risk, particularly for those risks that are difficult to measure. Quantitative risk tolerances are useful to set numerical limits for the amount of risk that a company is willing to take.R
Risk ToleranceGeneralUnited StatesU.S. ASB TermsThe aggregate risk-taking capacity of an organization.R