Run a risk system the business works in every day.
Your framework runs in the business's own processes and reports, so the risk report and the ORSA build from real work.
Where is risk outside appetite?
- 26Of 158 controls not fully effective
- 3Indicators outside appetite
- Coverholder binding outside authorityOR-06.1 · Syn 9146Outside
- Fronting partner claims handlingOR-06.2 · Syn 9146Outside
The PRA is pressing on model assumptions and data.
Our reading: the risk system you answer for has to read from the business's own figures, not a separate return.
- Oct 2026 · PRASMF4 carries "overall management of the risk management system". The Phase 2 proposals keep the role pre-approved.Source: PRA Rulebook, Insurance: Senior Management Functions, rule 3.3; PRA CP14/26, 22 Oct 2026, Table 1 (opens in a new tab)
- 15 Jan 2026 · PRAThe PRA will "increase our engagement with relevant firms with the most material differences in actual and assumed profitability in their internal models."Source: PRA, Insurance Supervision: 2026 priorities, p4 (opens in a new tab)
- 15 Jan 2026 · PRAOn exposure data, the PRA says "a number of firms need to improve data quality and standards".Source: PRA, Insurance Supervision: 2026 priorities, p5 (opens in a new tab)
What you get
-
A risk report built from the business's own work.
Controls, indicators and incidents come from the teams doing the work, so the report shows what is happening now.
- Today
- A quarterly risk return
- With CoVi Analytics
- Updated as the business works
Risk team view- UnderwritingControl checkedToday
- ClaimsIncident loggedToday
- Delegated authorityAction closedToday
-
Test capital assumptions when the figures land, not only at the ORSA.
Upload the SBF and LCR that finance already files, so plan and capital assumptions sit next to the risk picture.
- Today
- Once a year, in the ORSA
- With CoVi Analytics
- Whenever the figures land
From financeSBFLCRHalden risk reportuSCR £330mShare of the SCR, after diversification
-
Leave a trail the PRA can read.
Each risk links to its failing control, the incident and the action with its owner, so the trail is there before anyone asks for it.
- Today
- Emails and side notes
- With CoVi Analytics
- On the record, owner and date
RiskOR-06.1 · binding outside authorityControlC-137 · coverholder audits, ineffectiveIncidentINC-031ActionOwner named, date set
Be the risk function the business brings in early.
Risk reads from the business's own reports, so your view lands while the decision is still open.
See your risk system running on Halden.
Tell us how your risk report comes together today, and leave knowing where to start.
We'll walk you through how it all comes together with Halden.