Enterprise Risk Management & Solvency

major risk categories

If you are going to manage a hundred different things that could go wrong, you first need a small set of labelled boxes to sort them into — otherwise you drown in detail and double-count or miss things. The major risk categories are the standard set of boxes insurers and banks use to organize every danger they face. They are not laws of nature; they are a shared filing system that lets a risk manager say 'we have a lot in this box and very little in that one' and lets a regulator compare two firms fairly.

The usual boxes are: market risk (the value of investments moving against you — stocks falling, interest rates or exchange rates shifting), credit risk (someone who owes you money fails to pay, such as a bond issuer or a reinsurer going bust), insurance or underwriting risk (claims turn out worse than the premiums assumed — too many deaths, too few, a giant catastrophe, or simply mispricing), operational risk (losses from broken processes, fraud, IT failures, lawsuits, or human error), and liquidity risk (you may be perfectly solvent on paper yet unable to turn assets into cash fast enough to pay claims when they fall due). Some frameworks add strategic and reputational risk. A health insurer's biggest box is usually underwriting risk; a firm holding lots of bonds carries heavy market and credit risk.

These categories matter because almost every capital framework — risk-based capital, Solvency II's standard formula, internal models — is built module by module along exactly these lines, then combined. The honest caveat is that the boundaries are fuzzy and the real danger often lives in the seams: a pandemic is at once an underwriting event, a market shock, and an operational strain. Categorizing is a tool for thought, not a guarantee that a risk has been tamed once it has a label.

A life insurer sorts its dangers into boxes: bond defaults go in 'credit', a stock-market slump in 'market', policyholders living longer than expected in 'underwriting' (longevity), a hacked claims system in 'operational', and a sudden rush of surrenders it cannot fund in 'liquidity'. Capital is then estimated for each box and combined.

One firm, five boxes — each gets measured, then they are aggregated.

The categories overlap; a single real-world shock can land in several boxes at once, so summing them naively can both double-count and miss correlation.

Also called
risk taxonomytypes of risk风险分类風險分類