A TechRisk/RiskTech Reading List from Risk Management Magazine

Last week, the RIMS TechRisk/RiskTech virtual event featured two days of education content on some of the biggest challenges and opportunities in modern risk management, focusing extensively on cyberrisk as well as risktech—the latest technology tools and techniques for managing risk. As the presentations made clear, technology introduces some of the greatest risks to organizations, but also some of the most promising innovations to introduce or enhance risk management.

“We all know that, ‘As fast as a business develops a strategy to protect their organization’s digital assets, cyber predators have already figured out their next move,’” said Patrick Sterling, vice president of legendary people and risk management at Texas Roadhouse Restaurants and 2022 president of RIMS. “So, risk professionals must do what risk professionals do best: We must adapt. And we must adapt quickly.”

“We can’t forget about the risks that preceded this pandemic, and top on that list stands technology,” Sterling added in his address during the event. “Cyber gets a bad rap—when we talk about risk, we must remember risk can lead to positive outcomes. While greater dependency on technology has opened the door to more threats, it also allows us to improve processes, keep employees safe, boost efficiencies and engage our customers in a whole new way.”

As a RIMS virtual event, the content from TechRisk/RiskTech will be available for attendees or new registrants to view on-demand for the next 60 days, and you can check out the sessions here.

Following the TechRisk/RiskTech event and last Friday’s international Data Privacy Day, risk professionals who want to learn more about cyberrisk and risktech topics can also check out a wealth of related articles from Risk Management Magazine. Whether you would like to keep up the education after attending TechRisk/Risktech or just want to catch up on topics like cyberrisk, ransomware, cyber insurance, risktech, artificial intelligence, the internet of things and connected devices, and other technology that can help manage risk, here’s a roundup of recent Risk Management articles on cyberrisk and risktech:

Tech Risk (Cyberrisk):

Risktech:

RIMS TechRisk/RiskTech: Using Cyberrisk Analytics to Improve Your Cyber Insurance Program

As ransomware continues to spread and payment costs increase, cyber insurance rates have gone up exponentially. As a result, it is more important than ever for companies to understand their cyber vulnerabilities and exposures so they can ensure they are properly covered. One way to do this is through analytics.

online pharmacy mobic with best prices today in the USA

In a presentation at the RIMS TechRisk/RiskTech virtual event, Scott Stransky, managing director and head of the Cyber Risk Analytics Center at Marsh McLennan, outlined some of the key data that can help companies get a full view of their risk.

According to Stransky, there are five categories of data that are most important to determining your risk profile. Much of this data is in publicly available datasets that insurers already consult, so it is important that you have a handle on this information as well so you know how underwriters and other outsiders are viewing you:

  1. Firmographics: company demographics like revenue, employee count, industry, location, and company hierarchy
  2. Historical incidents: past breaches and insurance claims
  3. Technographics: a company’s external cybersecurity posture including the presence of firewalls, open ports, frequency of system patching, as well as internal cybersecurity practices like password management and data encryption
  4. Scoring: combines firmographics, historical incidents and technographics into a single number that designates the level of vulnerability
  5. Loss modeling: brings all elements together to predict the likelihood and cost of an event

Armed with this data, companies can take steps to make it easier to access optimal cyber insurance coverage and better insurance pricing. These could include improving your security and claims posture by addressing potential cybersecurity gaps, updating incident response plans, and identifying vendor partners to help improve security posture or respond to incidents. Companies can also explore policy structure options in terms of different program components (limits, attachment, coverage, risk retention, etc.

online pharmacy isofair with best prices today in the USA

) and consider alternative terms and conditions.
online pharmacy robaxin with best prices today in the USA

Finally, it is important to provide robust underwriting data by using assessment tools to minimize the need for supplemental applications, preparing for additional questions from underwriters, and highlighting significant cybersecurity updates and improvements over the past year.

In particular, companies should focus on what Stansky called the top 12 cybersecurity controls for risk mitigation, resilience and insurability:

  1. Multifactor authentication (MFA)
  2. Endpoint detection and response
  3. Secured, encrypted and tested backups
  4. Privileged access management
  5. Email filtering and web security
  6. Patch and vulnerability management
  7. Cyber incident response planning and testing
  8. Cybersecurity awareness training
  9. Hardening techniques, including remote desktop protocol mitigation
  10. Logging and monitoring/network protection
  11. End-of-life system replacement
  12. Vendor/digital supply chain risk management

For those that missed RIMS TechRisk/RiskTech, you can register and access the virtual event here. Sessions will be available on-demand for the next 60 days.

Should You Revisit Insured Property Value Estimates?

One of the first steps in obtaining commercial property insurance is to determine the value of the property being insured. The reported property value will drive premium amounts and, importantly, represents the property loss exposure.

Some commonly used property valuation methods include: obtaining an appraisal from a third-party firm; utilizing fixed-asset records adjusted for cost inflation; or using a simple benchmarking factor, such as dollars per square foot. In some cases, utilizing a simplified valuation approach can provide a reasonable value estimate with minimal effort. On the other hand, performing an appraisal (which insurers typically consider the “gold standard”) can provide much-needed accuracy and thoroughness, but will require a greater commitment of time and resources. 

At times, elevating the accuracy of a property value estimate can provide significant advantages during the insurance placement process. The key for risk managers, brokers and insurers is to recognize situations in which an accurate and comprehensive property valuation is critical. Consider these eight factors in the context of the insured property to see if a deep dive into the value estimate is necessary:  

  1. Size of exposure and riskiness of operation
    When property exposures are immense or operations are inherently risky, a thorough estimation process should be conducted every three to five years. Refineries and chemical processing plants with billion-dollar exposures and high-risk operations are a prime example—the stakes are too high to rely on cursory valuation methods over the long term.
  2. Changes in costs  
    Over time, some property costs will change more than others. These fluctuations are primarily driven by changes in technology, capability, and material and labor costs. As of this writing, there have been significant increases in commodity prices such as steel and lumber, which are driving up the costs of new property and equipment. When property is subject to a rapidly changing cost environment, this complexity needs to be carefully considered within the estimation method.  
  3. Complexity and scope of property 
    Global operations and complex properties often require a thorough analysis to be performed periodically. There is simply too much detail and nuance to use an abbreviated estimating approach for an extended period without introducing the possibility of significant error. Many global firms establish a multi-year process in which a comprehensive analysis is performed on a portion of properties each year.  
  4. Type of capital expenditures 
    A company’s capital expenditures typically represent either new asset additions or improvements to existing assets. Accounting for new assets is a straightforward process of addition. However, capital expenditures that represent improvements in condition may not translate directly into increasing replacement value for insurance purposes. This is a frequent occurrence within heavy industrial and processing operations and can result in an overestimation of value if not properly analyzed.  
  5. Major changes to business or operations 
    Major changes within a business, such as reconfiguring a manufacturing facility, adding production capacity, acquiring new businesses, consolidating operations, or relocating an operation, are likely to result in changes to the property and assets. Making a diligent effort to assess these circumstances in detail will help establish an accurate property value that can be used going forward.  
  6. Insurance market conditions 
    As of this writing, the property insurance market has experienced substantial price increases for three consecutive years. When insurance prices are high, developing an accurate estimate of property value will provide assurance that the coverage is neither more nor less than necessary. Developing reliable and accurate value estimates can also be a key differentiator for insureds when engaging with insurers in a difficult market.  
  7. Recent losses reveal inaccurate value estimates 
    Insurers will seriously question the validity of reported property values if a recent property loss reveals large inaccuracies in reported value estimates. In this case, performing a comprehensive valuation of the insured property is the best course of action.  
  8. Adjusting value estimates over time 
    Many companies adjust value estimates from the prior year to account for cost inflation. The accuracy of this approach will diminish over time. For typical commercial properties, conducting a comprehensive valuation every five to eight years can help recalibrate value estimates.  

Correctly valuing insurable property is one of the most critical inputs for managing property risk. While a shorthand valuation estimate may suffice in some circumstances, it is not a perfect solution to every situation. Sometimes there is no substitute for a thorough and diligent value estimate. Striking the right balance between valuation accuracy and effort requires knowing when an estimate is good enough and when it is not.  

5 Best Practices for Effective Claims Reviews

With the cost of insurance for businesses rising across many types of coverage, staying on top of trends in the claims portfolio is more important than ever. Spotting problem areas and opportunities sooner makes it easier to develop and implement steps to reduce risk pre-loss and better control costs post-loss. For this reason, many insurers and TPAs promise to conduct claims reviews with their business customers on a regular basis, but the rigor can vary greatly. Practices that have been common historically often lack the nuance and precision that can unlock the maximum benefit for each customer’s unique situation.

Here are five best practices for a wide variety of customers across a range of industries:

1. Assemble the right team

Typically, only the person overseeing claims at the business attends the claims review with key claims staff from the carrier. However, this small team limits the potential for brainstorming solutions and getting full buy-in to implement them. In addition to claims experts, it may also be helpful for the carrier’s loss control team to attend, as well as agent/broker staff.

buy isofair online metabolicleader.com/p7pmm/img/jpg/isofair.html no prescription pharmacy

From the business customer side, it is helpful to include all key personnel who can facilitate immediate decisions that will impact the ultimate resolution of the claim in an efficient and timely manner or provide other insightful information. This often includes the risk manager, and may also encompass employees from legal, human resources, safety, operations and even the CFO, in some cases.

2. Develop a clear understanding of the customer to set the claims review objective

Broadly speaking, the goal is always to minimize loss costs to help manage the price and coverage of the overall insurance program. However, each business and claims portfolio is unique. One company may be most concerned with how claims reserves are affecting budgets. Another company may have an unusually high experience modification rate that they want to bring down by reducing the frequency of worker injuries. Yet another company may be changing part of their operation and want to monitor claims activity associated with it more closely than business-as-usual activities. The policyholder’s unique objectives should drive decisions about how often to conduct the claims reviews, what types of claims to include and where to dive into the greatest detail.

3. Fully understand and account for the impact of claims on the insurance program

In the initial design of the insurance program, certain coverages may have been limited due to a problematic claims record. For instance, frequent third-party claims for premises liability may have led to restrictions on Med Pay coverage or a higher deductible to give the customer a bigger stake in safety measures.

buy wellbutrin online metabolicleader.com/p7pmm/img/jpg/wellbutrin.html no prescription pharmacy

Or perhaps the customer hoped for a loss-sensitive program but could only secure a guaranteed cost program due to lack of an internal pre- and post-loss management platform. The claims review should be designed to account for how frequency and severity may affect underwriting decisions so that the policyholder can move toward its coverage objective

4. Choose claims for review according to objectives, not simply dollar value

The default choice for what claims to review is often based on dollar value—e.g., all open claims with incurred losses of $25,000 or more. This approach may miss underlying trends that could lead to severe loss, however. For instance, perhaps a restaurant chain experiences a high frequency of slip-and-fall claims from workers in its kitchens. While these may all have been minor, but it may only be a matter of time until a severe injury occurs.

buy zyprexa online metabolicleader.com/p7pmm/img/jpg/zyprexa.html no prescription pharmacy

With the objective to reduce frequency and the risk of serious injury, the claims review should examine all slip-and-fall claims using data and analytics to uncover causal factors such as food and liquid dropped on floors or seasonal workers with little safety training.

5. Track reserving on a micro level relative to all factors that can affect open claims

Typically, reserving is only tracked from a macro perspective, but this can overlook a variety of factors that could help better manage reserves and ultimate outcomes. For example, are the latest technologies being consistently used to manage costs? Advances in artificial intelligence and data and analytics now allow us to identify treatment providers associated with the best outcomes for injured workers, but how well are companies taking advantage of the recommendations? Early resolution techniques for auto and general liability claims may lower the ultimate cost of claims but cause a short-term bump in claims payments that needs to be accounted for in the customer’s budgeting process.

Potential Benefits

Claims reviews based on these best practices can yield significant benefits, especially when used as part of a holistic approach to managing risk and reducing losses. For example, an early claims review for a new manufacturing customer identified sprain and strain injuries as a problem area. The loss control team then surveyed the manufacturer’s operations and uncovered increased risk due to various manual lifting tasks, such as loading 8-foot-tall plastic silos with heavy equipment in a confined space. Based on that finding, the insurer’s team conducted onsite job hazard analysis supervisory training that included a safe lifting program, online courses and ergonomic risk assessments on a variety of tasks. As a result, within about two years, the program cut the manufacturer’s workers compensation loss ratio roughly in half.