Halden reportsRisk
Halden report · RiskAre our controls working?
Mostly: 84% of Halden's 158 controls operate effectively, but the Claims and Delegated authority teams score lowest.
Controls by team
Halden's controls by team, built by Context Visualised. Control test results at 30 September 2026.
- 158Controls
- 84%Operating effectively (132 of 158)
- 26Not fully effective: 2 ineffective, 24 partial
- 29Tests overdue
Team score counts effective controls in full and partially effective ones at half. Strong is 90% and above, needs attention 75 to 89%, weak below 75%. Sorted weakest first.
Control effectiveness by team
- Effective
- Partially effective
- Ineffective
| Team | Eff. | Part. | Ineff. |
|---|---|---|---|
| Underwriting | 25 | 5 | 0 |
| Claims | 2 | 1 | 1 |
| Actuarial | 11 | 3 | 0 |
| Finance | 40 | 4 | 0 |
| Delegated authority | 3 | 2 | 1 |
| Compliance | 16 | 0 | 0 |
| IT & security | 10 | 2 | 0 |
| Operations | 9 | 3 | 0 |
| Executive | 16 | 4 | 0 |
Each spoke is a team, plotted as the share of its controls in each state. A full effective shape and tight inner shapes are what good looks like.
A team's score counts effective controls in full and partially effective ones at half. Teams sort weakest first; open one to see each control, its risk and when it was last tested.
Source: control library and control testing log at 30 Sep 2026.
Team controls
Claims
- 62%Team score
- 2/4Effective
- 1Tests overdue
- Claims authority agreementOR-06.2 Fronting partner claims handling failureC-139 · last tested 2 Aug 2026Ineffective
- Quarterly claims file auditsOR-06.2 Fronting partner claims handling failureC-140 · last tested 9 Sep 2026PartialOverdue
- Large claims committeeOR-05.3 Claims leakageC-133 · last tested 14 Aug 2026Effective
- Fraud screeningOR-05.3 Claims leakageC-134 · last tested 21 Sep 2026Effective
Team controls
Delegated authority
- 67%Team score
- 3/6Effective
- 2Tests overdue
- Coverholder auditsOR-06.1 Coverholder binding outside authorityC-137 · last tested 15 Sep 2026Ineffective
- Bordereaux validationOR-06.1 Coverholder binding outside authorityC-138 · last tested 22 Jul 2026PartialOverdue
- Coverholder scorecardsOR-06.3 Weak coverholder oversightC-142 · last tested 23 Aug 2026PartialOverdue
- Coverholder relationship plansIR-04.2 Loss of coverholder agreementsC-029 · last tested 15 Sep 2026Effective
- Binder renewal pipelineIR-04.2 Loss of coverholder agreementsC-030 · last tested 22 Jul 2026Effective
- DA oversight committeeOR-06.3 Weak coverholder oversightC-141 · last tested 16 Jul 2026Effective
Team controls
Operations
- 88%Team score
- 9/12Effective
- 3Tests overdue
- Independent assuranceSR-02.1 Policy system replacement failsC-082 · last tested 8 Aug 2026PartialOverdue
- Contractor frameworkOR-03.2 Insufficient resource for growthC-118 · last tested 17 Aug 2026PartialOverdue
- Quarterly partner reviewsOR-06.4 Fronting arrangement breakdownC-144 · last tested 10 Jul 2026PartialOverdue
- Programme governanceSR-02.1 Policy system replacement failsC-081 · last tested 1 Jul 2026Effective
- Business continuity planOR-01.2 Loss of office accessC-107 · last tested 21 Sep 2026Effective
- Remote working capabilityOR-01.2 Loss of office accessC-108 · last tested 1 Jul 2026Effective
- Retention plansOR-03.1 Loss of key underwritersC-115 · last tested 23 Aug 2026Effective
- Succession planningOR-03.1 Loss of key underwritersC-116 · last tested 3 Sep 2026Effective
- Workforce planningOR-03.2 Insufficient resource for growthC-117 · last tested 10 Jul 2026Effective
- Fronting agreement SLAsOR-06.4 Fronting arrangement breakdownC-143 · last tested 3 Sep 2026Effective
- Outsourcing registerOR-06.5 Critical outsourced service failureC-145 · last tested 17 Aug 2026Effective
- Exit plans for material outsourcersOR-06.5 Critical outsourced service failureC-146 · last tested 24 Sep 2026Effective
Team controls
Actuarial
- 89%Team score
- 11/14Effective
- 3Tests overdue
- Independent actuarial reviewIR-02.1 Long-tail casualty reserve inadequacyC-014 · last tested 18 Sep 2026PartialOverdue
- Event limits and exclusionsIR-03.2 Systemic cyber accumulationC-022 · last tested 20 Aug 2026PartialOverdue
- Climate scenario analysisIR-03.3 Climate-driven loss frequency and severityC-024 · last tested 7 Jul 2026PartialOverdue
- Pricing model governanceIR-01.2 Inadequate pricingC-003 · last tested 22 Jul 2026Effective
- Rate adequacy monitoringIR-01.2 Inadequate pricingC-004 · last tested 2 Aug 2026Effective
- Quarterly reserving committeeIR-02.1 Long-tail casualty reserve inadequacyC-013 · last tested 11 Aug 2026Effective
- Bordereaux data validationIR-02.2 Reserving data qualityC-015 · last tested 25 Jul 2026Effective
- Reserving data reconciliationIR-02.2 Reserving data qualityC-016 · last tested 5 Aug 2026Effective
- Realistic disaster scenario monitoringIR-03.1 Natural catastrophe accumulationC-019 · last tested 26 Aug 2026Effective
- Catastrophe model validationIR-03.1 Natural catastrophe accumulationC-020 · last tested 6 Sep 2026Effective
- Cyber aggregate scenariosIR-03.2 Systemic cyber accumulationC-021 · last tested 13 Jul 2026Effective
- Climate-adjusted catastrophe viewIR-03.3 Climate-driven loss frequency and severityC-023 · last tested 27 Sep 2026Effective
- Independent model validationSR-03.3 Internal model misstates capitalC-089 · last tested 3 Sep 2026Effective
- Model change governanceSR-03.3 Internal model misstates capitalC-090 · last tested 10 Jul 2026Effective
Team controls
Executive
- 90%Team score
- 16/20Effective
- 4Tests overdue
- Quarterly KPI reviewSR-01.1 Failure to deliver the 2027 growth planC-072 · last tested 19 Jul 2026PartialOverdue
- Local underwriting committeeSR-01.3 Dubai platform underdeliversC-076 · last tested 20 Aug 2026PartialOverdue
- Board challenge of the planSR-02.2 Growth outpaces infrastructureC-084 · last tested 22 Jul 2026PartialOverdue
- Distribution strategySR-05.1 New capital and MGAs compress marginsC-096 · last tested 25 Jul 2026PartialOverdue
- Group capital agreementCR-01.4 Group reinsurer support withdrawnC-057 · last tested 22 Jul 2026Effective
- External stop-loss market testedCR-01.4 Group reinsurer support withdrawnC-058 · last tested 2 Aug 2026Effective
- Strategy programme boardSR-01.1 Failure to deliver the 2027 growth planC-071 · last tested 12 Sep 2026Effective
- Dubai business plan reviewSR-01.3 Dubai platform underdeliversC-075 · last tested 13 Jul 2026Effective
- Capacity planningSR-02.2 Growth outpaces infrastructureC-083 · last tested 15 Sep 2026Effective
- Competitor monitoringSR-05.1 New capital and MGAs compress marginsC-095 · last tested 18 Sep 2026Effective
- Board effectiveness reviewSR-06.1 Ineffective board oversightC-097 · last tested 5 Aug 2026Effective
- Committee terms of referenceSR-06.1 Ineffective board oversightC-098 · last tested 12 Sep 2026Effective
- Culture surveySR-06.2 Culture misaligned with conduct expectationsC-099 · last tested 19 Jul 2026Effective
- Culture dashboardSR-06.2 Culture misaligned with conduct expectationsC-100 · last tested 26 Aug 2026Effective
- Crisis communications planSR-06.3 Reputational damage from poor communicationC-101 · last tested 6 Sep 2026Effective
- Spokesperson protocolSR-06.3 Reputational damage from poor communicationC-102 · last tested 13 Jul 2026Effective
- ESG committeeSR-07.1 ESG commitments not metC-103 · last tested 20 Aug 2026Effective
- Underwriting exclusions policySR-07.1 ESG commitments not metC-104 · last tested 27 Sep 2026Effective
- MI data lineageOR-05.4 Inaccurate risk and board MIC-135 · last tested 1 Jul 2026Effective
- Risk report reviewOR-05.4 Inaccurate risk and board MIC-136 · last tested 8 Aug 2026Effective
Team controls
Underwriting
- 92%Team score
- 25/30Effective
- 6Tests overdue
- Limit management on US E&SIR-01.3 Social inflation in US casualtyC-006 · last tested 16 Jul 2026PartialOverdue
- New business quality metricsIR-01.4 Adverse selection in growth classesC-008 · last tested 3 Sep 2026PartialOverdue
- Mid-year plan reforecastIR-01.5 Softening market cycleC-010 · last tested 17 Aug 2026PartialOverdue
- Dubai underwriting referralsIR-05.1 Concentration in Gulf energyC-032 · last tested 9 Sep 2026PartialOverdue
- Panel diversificationCR-01.3 Reinsurance cost and availabilityC-056 · last tested 15 Sep 2026PartialOverdue
- Zonal aggregate limitsIR-05.1 Concentration in Gulf energyC-031 · last tested 2 Aug 2026EffectiveOverdue
- Underwriter authority lettersIR-01.1 Underwriting outside appetite or authorityC-001 · last tested 8 Aug 2026Effective
- Peer review of large risksIR-01.1 Underwriting outside appetite or authorityC-002 · last tested 15 Sep 2026Effective
- Claims trends fed into pricingIR-01.3 Social inflation in US casualtyC-005 · last tested 9 Sep 2026Effective
- Portfolio steering reviewsIR-01.4 Adverse selection in growth classesC-007 · last tested 23 Aug 2026Effective
- Rate monitoringIR-01.5 Softening market cycleC-009 · last tested 10 Jul 2026Effective
- Wordings committeeIR-01.6 Unintended policy coverageC-011 · last tested 24 Sep 2026Effective
- Market cyber exclusions adoptedIR-01.6 Unintended policy coverageC-012 · last tested 4 Jul 2026Effective
- Climate exclusions reviewIR-02.3 Climate litigationC-017 · last tested 12 Sep 2026Effective
- Emerging risk monitoringIR-02.3 Climate litigationC-018 · last tested 19 Jul 2026Effective
- City and country aggregate limitsIR-03.4 Political violence accumulationC-025 · last tested 14 Aug 2026Effective
- Quota share to 9147IR-03.4 Political violence accumulationC-026 · last tested 21 Sep 2026Effective
- Cancellation terms in contractsIR-04.1 Early termination of multi-year contractsC-027 · last tested 1 Jul 2026Effective
- Retention monitoringIR-04.1 Early termination of multi-year contractsC-028 · last tested 8 Aug 2026Effective
- Maximum line size guidelinesIR-05.2 Large single-risk exposureC-033 · last tested 16 Jul 2026Effective
- Facultative reinsurance for large linesIR-05.2 Large single-risk exposureC-034 · last tested 23 Aug 2026Effective
- Minimum security ratingCR-01.1 Reinsurer defaultC-051 · last tested 7 Jul 2026Effective
- Counterparty limitsCR-01.1 Reinsurer defaultC-052 · last tested 14 Aug 2026Effective
- Contract certainty checksCR-01.2 Reinsurance programme gapsC-053 · last tested 21 Sep 2026Effective
- Programme modellingCR-01.2 Reinsurance programme gapsC-054 · last tested 1 Jul 2026Effective
- Early renewal planningCR-01.3 Reinsurance cost and availabilityC-055 · last tested 8 Aug 2026Effective
- Broker distribution monitoringCR-02.1 Broker concentrationC-059 · last tested 9 Sep 2026Effective
- Broker due diligenceCR-02.1 Broker concentrationC-060 · last tested 16 Jul 2026Effective
- Monthly plan vs actual monitoringSR-01.2 Business plan deviationC-073 · last tested 26 Aug 2026Effective
- Lloyd's plan variance reportingSR-01.2 Business plan deviationC-074 · last tested 6 Sep 2026Effective
Team controls
IT & security
- 92%Team score
- 10/12Effective
- 2Tests overdue
- Data ownership frameworkOR-08.1 Poor quality underwriting dataC-152 · last tested 12 Sep 2026PartialOverdue
- Validation of AI toolsOR-08.2 Uncontrolled AI in underwriting and claimsC-154 · last tested 26 Aug 2026PartialOverdue
- Disaster recovery testingOR-01.1 Prolonged system outageC-105 · last tested 7 Jul 2026Effective
- Important business services mappingOR-01.1 Prolonged system outageC-106 · last tested 14 Aug 2026Effective
- Endpoint detection and responseOR-02.1 Ransomware attackC-109 · last tested 8 Aug 2026Effective
- Immutable backupsOR-02.1 Ransomware attackC-110 · last tested 15 Sep 2026Effective
- Supplier security assessmentsOR-02.2 Third-party data breachC-111 · last tested 22 Jul 2026Effective
- Data sharing agreementsOR-02.2 Third-party data breachC-112 · last tested 2 Aug 2026Effective
- Privileged access managementOR-02.3 Privileged access misuseC-113 · last tested 9 Sep 2026Effective
- Quarterly access recertificationOR-02.3 Privileged access misuseC-114 · last tested 16 Jul 2026Effective
- Data quality rulesOR-08.1 Poor quality underwriting dataC-151 · last tested 5 Aug 2026Effective
- AI use policy and registerOR-08.2 Uncontrolled AI in underwriting and claimsC-153 · last tested 19 Jul 2026Effective
Team controls
Finance
- 95%Team score
- 40/44Effective
- 5Tests overdue
- Coverholder settlement termsCR-02.3 Premium credit control failureC-064 · last tested 17 Aug 2026PartialOverdue
- Funds withheld and collateralCR-03.1 Fronting partner insolvencyC-066 · last tested 4 Jul 2026PartialOverdue
- Alternative fronting partner identifiedCR-03.2 Fronting partner downgradeC-068 · last tested 18 Sep 2026PartialOverdue
- Board performance reviewSR-01.4 Plan profit not achievedC-078 · last tested 7 Jul 2026PartialOverdue
- Coverholder credit limitsCR-02.2 Coverholder and broker creditC-062 · last tested 3 Sep 2026EffectiveOverdue
- Duration limitsMR-01.1 Rising interest rates reduce bond valuesC-035 · last tested 3 Sep 2026Effective
- Interest rate stress testingMR-01.1 Rising interest rates reduce bond valuesC-036 · last tested 10 Jul 2026Effective
- ALM matching policyMR-01.2 Asset-liability duration mismatchC-037 · last tested 17 Aug 2026Effective
- Duration monitoringMR-01.2 Asset-liability duration mismatchC-038 · last tested 24 Sep 2026Effective
- Equity allocation capMR-02.1 Equity market fallC-039 · last tested 4 Jul 2026Effective
- Investment guidelinesMR-02.1 Equity market fallC-040 · last tested 11 Aug 2026Effective
- Credit quality limitsMR-03.1 Credit spread wideningC-041 · last tested 18 Sep 2026Effective
- Spread stress testingMR-03.1 Credit spread wideningC-042 · last tested 25 Jul 2026Effective
- Currency matching policyMR-04.1 Currency mismatch lossesC-043 · last tested 5 Aug 2026Effective
- Monthly FX exposure reportMR-04.1 Currency mismatch lossesC-044 · last tested 12 Sep 2026Effective
- AED exposure limitMR-04.2 AED peg riskC-045 · last tested 19 Jul 2026Effective
- USD settlement of fronted balancesMR-04.2 AED peg riskC-046 · last tested 26 Aug 2026Effective
- Liquidity stress testingMR-05.1 Liquidity squeeze after a major lossC-047 · last tested 6 Sep 2026Effective
- Letter of credit facilityMR-05.1 Liquidity squeeze after a major lossC-048 · last tested 13 Jul 2026Effective
- Remittance scheduleMR-05.2 Trapped cash in DubaiC-049 · last tested 20 Aug 2026Effective
- DFSA capital bufferMR-05.2 Trapped cash in DubaiC-050 · last tested 27 Sep 2026Effective
- Trust account requirementsCR-02.2 Coverholder and broker creditC-061 · last tested 23 Aug 2026Effective
- Aged debt monitoringCR-02.3 Premium credit control failureC-063 · last tested 10 Jul 2026Effective
- Fronting partner financial monitoringCR-03.1 Fronting partner insolvencyC-065 · last tested 24 Sep 2026Effective
- Rating triggers in fronting agreementsCR-03.2 Fronting partner downgradeC-067 · last tested 11 Aug 2026Effective
- Approved bank listCR-04.1 Bank or custodian failureC-069 · last tested 25 Jul 2026Effective
- Deposit limits per bankCR-04.1 Bank or custodian failureC-070 · last tested 5 Aug 2026Effective
- Quarterly reforecastSR-01.4 Plan profit not achievedC-077 · last tested 27 Sep 2026Effective
- Budget holder sign-offSR-01.5 Expense overrunC-079 · last tested 14 Aug 2026Effective
- Expense ratio monitoringSR-01.5 Expense overrunC-080 · last tested 21 Sep 2026Effective
- Solvency monitoringSR-03.1 Insufficient capital for the planC-085 · last tested 2 Aug 2026Effective
- Capital contingency planSR-03.1 Insufficient capital for the planC-086 · last tested 9 Sep 2026Effective
- Capital provider reportingSR-03.2 Loss of third-party capital on 9147C-087 · last tested 16 Jul 2026Effective
- Annual investor meetingsSR-03.2 Loss of third-party capital on 9147C-088 · last tested 23 Aug 2026Effective
- Independent pricing reviewSR-04.1 Intra-group reinsurance not at arm's lengthC-091 · last tested 17 Aug 2026Effective
- Board approval of intra-group contractsSR-04.1 Intra-group reinsurance not at arm's lengthC-092 · last tested 24 Sep 2026Effective
- Tax engine on bordereauxOR-04.4 Premium tax non-complianceC-125 · last tested 12 Sep 2026Effective
- Annual tax health checkOR-04.4 Premium tax non-complianceC-126 · last tested 19 Jul 2026Effective
- Return submission checklistOR-04.5 Lloyd's and Solvency II reporting errorsC-127 · last tested 26 Aug 2026Effective
- Four-eyes review of returnsOR-04.5 Lloyd's and Solvency II reporting errorsC-128 · last tested 6 Sep 2026Effective
- Month-end close reviewOR-05.1 Material misstatementC-129 · last tested 13 Jul 2026Effective
- External auditOR-05.1 Material misstatementC-130 · last tested 20 Aug 2026Effective
- Dual payment authorisationOR-05.2 Payment fraud or errorC-131 · last tested 27 Sep 2026Effective
- Bank detail change verificationOR-05.2 Payment fraud or errorC-132 · last tested 7 Jul 2026Effective
Team controls
Compliance
- 100%Team score
- 16/16Effective
- 3Tests overdue
- Conflicts of interest policySR-04.2 Conflicts between 9146 and 9147C-093 · last tested 4 Jul 2026EffectiveOverdue
- Territory controls in the policy systemOR-04.3 Licensing breachesC-124 · last tested 5 Aug 2026EffectiveOverdue
- Consumer Duty MIOR-09.1 Poor customer outcomesC-155 · last tested 6 Sep 2026EffectiveOverdue
- Allocation committeeSR-04.2 Conflicts between 9146 and 9147C-094 · last tested 11 Aug 2026Effective
- Compliance monitoring planOR-04.1 Breach of PRA, FCA or Lloyd's requirementsC-119 · last tested 24 Sep 2026Effective
- Regulatory change trackerOR-04.1 Breach of PRA, FCA or Lloyd's requirementsC-120 · last tested 4 Jul 2026Effective
- DFSA compliance calendarOR-04.2 DFSA requirements not met in DubaiC-121 · last tested 11 Aug 2026Effective
- Local compliance monitoringOR-04.2 DFSA requirements not met in DubaiC-122 · last tested 18 Sep 2026Effective
- Licensing checks before bindingOR-04.3 Licensing breachesC-123 · last tested 25 Jul 2026Effective
- Sanctions screeningOR-07.1 Sanctions breachC-147 · last tested 4 Jul 2026Effective
- Sanctions clauses on all policiesOR-07.1 Sanctions breachC-148 · last tested 11 Aug 2026Effective
- Gifts and hospitality registerOR-07.2 Bribery and corruptionC-149 · last tested 18 Sep 2026Effective
- Third-party due diligenceOR-07.2 Bribery and corruptionC-150 · last tested 25 Jul 2026Effective
- Complaints root cause analysisOR-09.1 Poor customer outcomesC-156 · last tested 13 Jul 2026Effective
- Annual fair value assessmentsOR-09.2 Products not delivering fair valueC-157 · last tested 20 Aug 2026Effective
- Product approval processOR-09.2 Products not delivering fair valueC-158 · last tested 27 Sep 2026Effective
What it tells us this quarter
- 62%
Claims scores 62% and Delegated authority 67%, the only two teams rated weak.
- 2
Two controls are ineffective: coverholder audits (C-137) and the claims authority agreement with the UAE fronting partner (C-139).
- 29
Twenty-nine control tests are overdue, across nine teams.
What we did about it
Actions on the two ineffective controls, from Halden's action log.
- ACT-035
Clear the coverholder audit backlog (6 overdue)
- Owner
- Head of Delegated Authority
- Policy (approved by)
- Delegated authority · Underwriting committee
- Due
- 30 Sep 2026 ⚠ overdue
- ACT-029
Agree claims service levels with the UAE fronting partner (INC-028)
- Owner
- Head of Claims
- Policy (approved by)
- Claims management · Underwriting committee
- Due
- 31 Oct 2026
Actions are listed under the policy they sit in. The action log does not record a deciding committee.
Where the numbers come from
Results come from second-line control testing, recorded against each control with its last test date. The same controls appear in the risk register, the process maps and the policies.
- Board datacontrol library and control testing log at 30 Sep 2026
Related reports
One email a month: "This month at Halden". Email address only.
Halden is fictitious. Its numbers are illustrative.