Skip to main content Accessibility help

Quantifying Operational Risk in General Insurance Companies. Developed by a Giro Working Party

  • Michael Howard Tripp (a1), H. L. Bradley, R. Devitt, G. C. Orros, G. L. Overton, L. M. Pryor and R. A. Shaw...


The paper overviews the application of existing actuarial techniques to operational risk. It considers how, working in conjunction with other experts, actuaries can develop a new framework to monitor/review, establish context, identify, understand and decide what to do in terms of the management and mitigation of operational risk. It suggests categorisations of risk to help analyses and proposes how new risk indicators may be needed, in conjunction with more normal quantification approaches.

Using a case study, it explores the application of stress and scenario testing, statistical curve fitting (including the application of extreme value theory), causal (Bayesian) modelling and the extension of dynamic financial analysis to include operational risk. It suggests there is no one correct approach and that the choice of parameters and modelling assumptions is critical. It lists a number of other techniques for future consideration.

There is a section about how ‘soft issues’ including dominance risk, the impact of belief systems and culture, the focus of performance management systems and the psychology of organisations affect operational risk. An approach to rating the people aspects of risk in parallel with quantification may help give a better overall assessment of risk and improve the understanding for capital implications.

The paper concludes with a brief review of implications for reporting and considers what future work will help develop the actuarial contribution. It is hoped the paper will sow seeds for the development of best practice in dealing with operational risk and increase the interest of actuaries in this emerging new topic.



Hide All
BBA (1999). Operational risk management — the new frontier. The British Bankers Association.
BBA (2002). Operational risk management — the new frontier. British Bankers Association.
BBA, CA. Operational risk database loss categorisation. British Bankers Association.
BCBS (2001). Working paper on the regulatory treatment of operational risk. Bank for International Settlements, Basel Committee on Banking Supervision.
BCBS (2003). Sound practices for the management and supervision of operational risk. Bank for International Settlements. Basel Committee Publications No 96.
Belbin, M.R. (1995). Team roles at work. Butterworth-Heinemann.
CAS (2001). Final report of the advisory committee on enterprise risk management. Casualty Actuarial Society.
CAS (2003). Overview of enterprise risk management. Enterprise Risk Management Committee, Casualty Actuarial Society. CAS various.
Charniak, E. (1991). Bayesian networks without tears. AI Magazine, 12(4), 5063.
Converium Re. (2003). Dynamic financial analysis understanding risk and value creation in insurance.
Doerig, H.-U. (2000). Operational risks in financial services: an old challenge in a new environment. Paper presented to Institut Internationale d'Etudes Bancaires, London. Available from
Embrechts, P., Klueppelberg, C. & Mikosch, T. (1997). Modelling of extremal events for insurance and finance. Springer.
Fox, N.J. (2005). Capability maturity model (RM-CMM) for risk management.
FSA (2002). Operational risk systems and controls. Financial Services Authority.
FSA (2003a). The firm risk assessment framework. Financial Services Authority.
FSA (2003b). Enhanced capital requirements and individual capital assessments for non-life insurers. Financial Services Authority.
FSA (2003c). Integrated prudential sourcebook — near-final text on prudential risks systems and controls. Financial Services Authority.
GIRO (2002). Report of the Operational Risks Working Party to GIRO 2002.
GIRO (2003). Operational risk: measurement or bust. Report of the working party to GIRO 2003.
Hall, D.C. (2002). Using a risk management maturity-level model. Software Risk Magazine, Vol. 2, No. 4.
Hallock, Micah, Heintz, & Kourtney, (2001). Measuring operational risk. Bank Accounting and Finance, Vol. 14, Issue 4.
Higgs, (1996). Comparison of Myers Briggs type indicator profiles and Belbin team roles. Henley Management College.
Hoffman, D. (2002). Managing operational risk: 20 firmwide best practice strategies. John Wiley & Sons.
Institute of Actuaries. Claims reserving manual.
IRM (2002). A risk management standard. The Institute of Risk Management, ALARM (The National Forum for Risk Management in the Public Sector) and AIRMIC (The Association of Insurance and Risk Managers).
King, J.L. (2001). Operational risk: measurement and modelling. Wiley Finance.
Laycock, et al. (1998). Operational risks and financial institutions. Risk Publications/Arthur Andersen.
MacKenzie, D. & Millo, Y. (2001). Negotiating a market, performing theory: the historical sociology of a financial derivatives exchange. Paper presented at European Association for Evolutionary Political Economy conference, Siena, November 8-11, 2001.
McDonnell, W. (2002a). Managing risk: practical lessons from recent ‘failures’ of E.U. insurers.
McDonnell, W. (2002b). Financial Services Authority occasional paper, 20 December 2002.
Muermann, A. & Oktem, U. (2002). The near-miss management of operational risk. The Journal of Risk Finance.
Netica (1997). NeticaTM users guide, Norsys Software Corporation,
Pearl, J. (1988). Probabilistic reasoning in intelligent systems. Morgan Kaufmann.
Pyle, D.H. (1997). Bank risk management: theory. Paper presented at the Conference on Risk Management and Regulation in Banking, Jerusalem, May 17-19, 1997.
Quenk, N.L. (1999). Essentials of Myers-Brigss type indicator assessment. John Wiley & Sons Inc.
Risksig (2002). Risk management maturity level development. Risk Management Specific Interest Group.
Simons, R. (1999). How risky is your company? Harvard Business Review.



Full text views

Total number of HTML views: 0
Total number of PDF views: 0 *
Loading metrics...

Abstract views

Total abstract views: 0 *
Loading metrics...

* Views captured on Cambridge Core between <date>. This data will be updated every 24 hours.

Usage data cannot currently be displayed