Risk Management as Strategic Necessity

By Osvaldo Ramírez Bermúdez, Chief Risk Officer, Universal Group, Inc.

In the insurance industry, risk management is often viewed through the lens of compliance, controls and capital requirements. For a diversified insurance group such as Universal Group, Inc., however, risk management is much more than a regulatory obligation. It is embedded in the way the Group evaluates strategy, capital, operations and emerging risks. It is fundamental to solvency and the insurer’s ability to fulfill its promises to policyholders.

This is particularly relevant for an insurance group operating multiple licensed carriers. Each business presents a different risk profile, but their risks are interconnected through capital, investments, liquidity, operations and governance.

A holding company overseeing carriers in property and casualty, as well as life and annuities, cannot manage risk in silos. Correlated risks—such as a major hurricane simultaneously depressing investment portfolios, triggering catastrophic claims and straining liquidity for annuity surrenders—can compound quickly. This is why regulators and rating agencies expect a consolidated, group-wide view of risk.

A traditional approach to insurance regulation focuses on the financial condition of individual legal entities. That perspective remains essential, but it is insufficient for a diversified group. A significant event affecting one subsidiary can generate consequences for the entire organization through capital requirements, intercompany transactions, liquidity needs or reputational contagion.

An enterprise perspective allows risks to be evaluated both individually and collectively, enabling management to consider potential correlations and emerging exposures across the organization.

In a jurisdiction like Puerto Rico, where catastrophe exposure, dual regulatory oversight and federal requirements converge, the holding companies that treat risk management as a strategic differentiator will be best positioned.

Enterprise Risk Management addresses this broader perspective by identifying, assessing, monitoring and managing risks across the organization. The National Association of Insurance Commissioners and rating agencies such as A.M. Best and Moody’s all recognize ERM as an important component of the insurance solvency framework.

For an insurer group, ORSA (Own Risk and Solvency Assessment) should not be treated as an annual report prepared for regulators. Its greatest value is as a management tool: a disciplined process for connecting the business plan, risk appetite, stress testing, capital planning and strategic decisions.

Mature ERM does not simply identify and report risk after decisions have been made. It provides management and the Board with a framework for considering risk as part of the decision-making process itself.

Critical components

Effective enterprise risk management requires several key elements. First, group-wide risk governance: the Board and Chief Risk Officer must maintain visibility across all carriers. Risk appetite statements should be set at the holding company level and cascaded down with line-of-business specificity. This promotes consistent escalation and accountability while recognizing the distinct risk characteristics of each business.

Second, capital and liquidity coordination. RBC adequacy for P&C carriers must be modeled alongside the capital-intensive guarantees embedded in certain products. Stress testing should simulate correlated scenarios—a major hurricane alongside an equity market downturn—rather than testing each in isolation. This allows management to assess potential capital and liquidity pressures before they materialize.

Third, reinsurance and hedging strategy. The counterparty risk process begins with rigorous reinsurer selection and monitoring for all statutory companies. An enterprise perspective allows the Group to evaluate the combined implications of catastrophe reinsurance and hedging for counterparty exposure, concentration, liquidity and overall risk-transfer effectiveness.

Fourth, investment risk discipline. Certain product liabilities require asset-liability matching, while P&C liquidity needs require more conservative holdings. The investment policy must reflect the holding company’s blended liability profile rather than a single strategy. Management must maintain visibility into aggregate investment exposures, concentration and counterparty risk across the organization.

Beyond regulatory necessity, disciplined ERM protects rating agency assessments, policyholder confidence and access to capital markets—all critical for competing for reinsurance capacity, distribution relationships and investor trust.

In a jurisdiction like Puerto Rico, where catastrophe exposure, dual regulatory oversight and federal requirements converge, the holding companies that treat risk management as a strategic differentiator will be best positioned to sustain profitable growth across economic and catastrophe cycles.

No risk management framework can eliminate uncertainty. Insurance is fundamentally the business of understanding, assuming, pricing and managing risk. The measure of a mature ERM organization is not whether it can predict every event, but whether it has the governance, information and analytical capabilities to identify risk early, evaluate impact and respond effectively.

Risk management frameworks must evolve as the environment changes. New technologies create new exposures; financial markets evolve; regulatory expectations develop; and risks that once appeared remote can become material with remarkable speed. At Universal Group, we do not regard our ERM framework as finished. We continuously challenge assumptions, evaluate emerging risks and strengthen governance processes as conditions evolve.

Risk management at Universal Group is neither an isolated function nor simply a regulatory requirement. It is an enterprise discipline embedded in the management of the organization—and fundamentally, the foundation of our ability to fulfill the promises our insurance companies make to their policyholders.