Skip to main content

Structuring a Solvency II ORSA That Evidences Forward-Looking Risk Judgement

A practical guide to building an ORSA report that demonstrates genuine forward-looking risk assessment to the PRA. Readers will understand how to structure the document, where boards typically weaken their own case, and how to present a capital position that stands up to supervisory challenge on its merits.

The PRA reads your ORSA to find out two things: whether the board genuinely owns the firm's forward-looking view of risk and capital, and whether the standard formula or internal model actually captures the risks the business runs. Weak ORSAs fail on both counts, not because the numbers are wrong, but because the narrative does not show judgement. A capital add-on is the supervisory response to a gap the firm has not addressed itself. The way to meet that bar is to address the gaps first, visibly, in the document.

Start With the Business Plan, Not the Risk Register

The single most common structural weakness is an ORSA built bottom-up from the risk taxonomy. The PRA wants to see the business plan, the strategic choices behind it, and then the risks those choices generate over the planning horizon. Open the document with the plan: new product lines, pricing assumptions, reinsurance structure, distribution changes, investment strategy. Everything that follows should trace back to decisions the board has actually taken or is considering.

If the ORSA reads like it could have been written without reference to this year's strategy, it will not evidence forward-looking assessment, and the supervisor will ask why.

Make the Overall Solvency Needs Assessment Do Real Work

The Overall Solvency Needs (OSN) assessment is where firms either demonstrate genuine thinking or expose the absence of it. The question is whether the SCR, as calculated, reflects the risks the firm actually runs. If it does not, say so, quantify the difference, and explain how the board has set capital accordingly.

Typical areas where the standard formula understates risk: concentration in illiquid assets, sovereign exposures treated at zero risk weight, mass lapse behaviours not captured in life modules, cyber and operational risks that sit awkwardly in the operational risk module, climate transition risk on the asset side. Address each explicitly. A firm that says "the standard formula is appropriate without adjustment" and offers no analysis is inviting challenge.

Where the OSN exceeds the SCR, hold capital against it and say so. This is the opposite of what some boards fear: transparent self-assessment of a higher needs figure does not trigger an add-on, it demonstrates the board is already doing the work.

Build Stress and Scenario Testing Around Management Actions

Stress scenarios without credible management responses are decorative. For each severe but plausible scenario, show the projected solvency path, the trigger points at which specific actions would be taken, the lead time required, and the realistic benefit of each action net of frictional costs. Reinsurance restructuring, dividend suspension, repricing, portfolio rebalancing: each needs a timeline and a named owner.

Reverse stress testing should identify the scenarios that break the business model, not just the SCR. Expect the PRA to probe the link between reverse stress outcomes and the firm's recovery indicators.

Link the ORSA to Decisions Already Taken

The strongest evidence of forward-looking assessment is a record of decisions the ORSA has influenced: a product withdrawn, a reinsurance treaty renegotiated, an investment limit tightened, a capital buffer increased. Include a short section cross-referencing board minutes. If the ORSA has not changed anything, the board should ask why before the supervisor does.

What Good Looks Like

A credible ORSA report is typically shorter than a weak one. It opens with the board's own summary in the board's own language, sets out the strategy, identifies where the SCR calculation diverges from the firm's view of risk, quantifies that divergence, shows the capital response, and closes with a clear statement of the solvency position through the planning horizon under base and stress conditions. Technical appendices sit behind.

The next action for most boards is to read last year's ORSA against this standard and identify where the narrative does not yet show judgement. That is the gap to close before the next submission.

Frequently Asked Questions

How long should the ORSA report be?

There is no prescribed length. Most credible reports for mid-sized insurers run 60 to 120 pages including appendices. Length is not the issue: a 200-page document that buries the board's view is weaker than a 70-page document that states it clearly.

Should we disclose where we think the standard formula understates our risk?

Yes. This is the central purpose of the OSN assessment. Firms that identify divergences and hold capital against them are doing what the regime requires. Firms that stay silent on known weaknesses invite the add-on they are trying to avoid.

How often should the ORSA be refreshed outside the annual cycle?

Whenever the risk profile changes materially: a significant acquisition, a reinsurance restructuring, a shift in investment strategy, a market dislocation that invalidates key assumptions. The regulation requires it, and supervisors notice when a firm has had an obvious trigger and not responded.

Who should actually write it?

The risk function should draft, but the board must own the narrative sections, particularly the summary, the strategic context, and the conclusions on solvency adequacy. If those sections read as if written by the second line alone, the document fails its core purpose.

What is the single most common reason for a capital add-on following ORSA review?

An unexplained gap between the firm's described risk profile and the SCR calculation, combined with no evidence the board has considered the gap. The add-on is the supervisor filling in the analysis the firm did not do.

Frequently asked questions

How long should the ORSA report be?

There is no prescribed length. Most credible reports for mid-sized insurers run 60 to 120 pages including appendices. Length is not the issue: a 200-page document that buries the board's view is weaker than a 70-page document that states it clearly.

Should we disclose where we think the standard formula understates our risk?

Yes. This is the central purpose of the OSN assessment. Firms that identify divergences and hold capital against them are doing what the regime requires. Firms that stay silent on known weaknesses invite the add-on they are trying to avoid.

How often should the ORSA be refreshed outside the annual cycle?

Whenever the risk profile changes materially: a significant acquisition, a reinsurance restructuring, a shift in investment strategy, a market dislocation that invalidates key assumptions. The regulation requires it, and supervisors notice when a firm has had an obvious trigger and not responded.

Who should actually write it?

The risk function should draft, but the board must own the narrative sections, particularly the summary, the strategic context, and the conclusions on solvency adequacy. If those sections read as if written by the second line alone, the document fails its core purpose.

What is the single most common reason for a capital add-on following ORSA review?

An unexplained gap between the firm's described risk profile and the SCR calculation, combined with no evidence the board has considered the gap. The add-on is the supervisor filling in the analysis the firm did not do.

Related guides

Regulation & Regulatory Change

Structuring a Dear CEO Letter Response That Lands Credibly

This guide sets out how to construct a Dear CEO letter response that answers the FCA's concerns with evidence, candour, and proportionate commitments. After reading it, you will know how to sequence the response, calibrate tone, and close the loop in a way that builds supervisory trust rather than prompting further questions.

Regulatory submissionRegulatorsBoards
4 min readRead guide →
Regulation & Regulatory Change

Structuring a Section 167/168 Investigation Response Strategy

A practical guide to building an investigation response that protects the firm's legal and commercial interests while demonstrating genuine cooperation with the FCA. Readers will finish with a clear framework for governance, document handling, witness preparation, and stakeholder sequencing in the first critical weeks of an investigation.

Regulatory submissionRegulatorsBoards
4 min readRead guide →
Regulation & Regulatory Change

Structuring a Pillar 3 Disclosure Under CRR for PRA-Regulated Firms

A practical guide to building a Pillar 3 disclosure that meets CRR and PRA expectations on transparency while handling commercially sensitive information responsibly. After reading, senior leaders will know how to sequence drafting, govern omissions properly, and brief the board on the trade-offs that matter.

Regulatory submissionRegulatorsBoards
4 min readRead guide →
Regulation & Regulatory Change

How to Structure a Recovery Plan Under PRA SS9/17 That Evidences Credible Options

A practical guide to building a Recovery Plan that satisfies SS9/17 by demonstrating genuinely executable options, calibrated indicators, and a governance spine that works under stress. Readers will finish with a clearer view of what the PRA is actually testing and how to evidence it.

Regulatory submissionRegulatorsBoards
4 min readRead guide →
Regulation & Regulatory Change

How to Structure a Pillar 2 Liquidity ILAAP That Evidences Robust Risk Management

A practical guide to building an ILAAP submission that demonstrates genuine command of liquidity risk under the PRA's Pillar 2 framework. Readers will finish with a clearer view of how to sequence the document, where PRA challenge concentrates, and how to evidence calibration decisions that stand up to L-SREP review.

Regulatory submissionRegulatorsBoards
4 min readRead guide →

Where internal confidence may exceed external evidence

Polar Insight helps leadership teams test critical assumptions against stakeholder, market, regulatory, and operational reality before risk compounds.

Explore Stakeholder Proximity