{
 "slug": "captive-insurance-companies-self-insured-retentions-large-enterprises",
 "topic_id": "TOPIC-070",
 "cluster": "Cyber Insurance & Risk Transfer",
 "tier": "Tier B",
 "title": "Financing agent risk through a captive when the market will not write it",
 "summary": "Commercial insurers price unbounded autonomous-system liability out of reach or decline it. Large enterprises respond by retaining the risk, which makes the loss control their own problem.",
 "lede": "When no market will write a coverage at a sensible price, a large enterprise insures itself. That is a familiar mechanism, and it moves the question from what will an underwriter accept to what will our own actuary accept.",
 "date": "2024-08-27",
 "category": "Vertical",
 "author_id": "elias-vanterpool-osei",
 "tags": [
  "captive insurance",
  "risk retention",
  "enterprise risk",
  "loss control",
  "agent liability",
  "risk financing"
 ],
 "image_title": "Captive Financing Agent Risk",
 "schema": "Article",
 "key_takeaways": [
  "A captive converts an external underwriting problem into an internal one, with the same need for verifiable loss control.",
  "Actuarial credibility requires exposure definition and loss data; for agent risk the exposure is poorly bounded and the history is short.",
  "Instrumenting authorisation gives the captive both a loss control and the data to price the retained layer."
 ],
 "body": [
  {
   "type": "h2",
   "text": "Why the commercial market hesitates"
  },
  {
   "type": "diagram",
   "kind": "flow",
   "alt": "Retention, and what the actuary then needs",
   "caption": "A captive converts an external underwriting problem into an internal one with the same requirements.",
   "nodes": [
    {
     "label": "Commercial market declines",
     "note": "undefined exposure",
     "bad": true
    },
    {
     "label": "Risk retained in a captive",
     "note": "the available option"
    },
    {
     "label": "Actuary needs an exposure base",
     "note": "actions, values",
     "bad": true
    },
    {
     "label": "And loss data",
     "note": "thin",
     "bad": true
    }
   ]
  },
  {
   "type": "p",
   "html": "Three reasons, all reasonable from an underwriter's position."
  },
  {
   "type": "table",
   "head": [
    "Reason",
    "Detail"
   ],
   "rows": [
    [
     "Undefined exposure",
     "What an autonomous system can do is bounded by its credentials, not by a policy schedule"
    ],
    [
     "No loss history",
     "The technology is too new for credible frequency and severity estimates"
    ],
    [
     "Aggregation risk",
     "A defect in a widely used component could produce correlated losses across many insureds"
    ],
    [
     "Attribution difficulty",
     "Determining whether a loss was caused by the agent, the operator, or a third party is unsettled"
    ]
   ]
  },
  {
   "type": "p",
   "html": "The last row is the one that makes wordings hard to draft. An insurer needs to know what triggers the cover, and 'the agent did something wrong' is not yet a definable trigger."
  },
  {
   "type": "h2",
   "text": "What a captive changes and what it does not"
  },
  {
   "type": "p",
   "html": "It changes who bears the risk and who prices it. It does not change the underlying exposure or the need to control it."
  },
  {
   "type": "p",
   "html": "In fact the discipline is often greater. A captive must satisfy a regulator, an auditor and its own actuary, and those parties ask the same questions a commercial underwriter would — with the difference that the answers determine your own capital requirement."
  },
  {
   "type": "h2",
   "text": "The actuary's problem"
  },
  {
   "type": "p",
   "html": "Pricing a retained layer needs an exposure base and loss data. For agent risk both are thin."
  },
  {
   "type": "code",
   "text": "# What an actuary needs, and what is usually available\n\nExposure base       ?   number of agents — varies by definition\n                    ?   actions per period — rarely measured\n                    ?   value at risk per action — usually unbounded\n\nFrequency           ?   little internal history\nSeverity            ?   little internal history\nControl credit      ?   no evidence that controls operated"
  },
  {
   "type": "p",
   "html": "Instrumenting authorisation fills three of these directly. Actions per period becomes countable, value at risk per action becomes bounded by the delegation scope, and control operation becomes measurable."
  },
  {
   "type": "h2",
   "text": "Bounding the exposure with delegation"
  },
  {
   "type": "p",
   "html": "The single most useful thing an enterprise can do for its own risk financing is to make the agent's maximum exposure a configured number rather than an open question."
  },
  {
   "type": "ul",
   "items": [
    "Per-action value ceiling in the delegation",
    "Aggregate ceiling per period",
    "Counterparty and action-class restrictions",
    "Expiry, so a stale delegation does not persist",
    "Revocation that is enforced at the point of effect"
   ]
  },
  {
   "type": "p",
   "html": "With those, the theoretical maximum loss from a compromised agent is computable. An actuary can work with a computable number; they cannot work with 'whatever it can reach'."
  },
  {
   "type": "h2",
   "text": "Loss control that produces its own evidence"
  },
  {
   "type": "p",
   "html": "A captive's loss control programme has to be demonstrable to its auditor, the same way a commercial insurer's warranty has to be demonstrable at claim."
  },
  {
   "type": "table",
   "head": [
    "Captive requirement",
    "What the instrumentation provides"
   ],
   "rows": [
    [
     "Documented loss control",
     "Defined scope and gates, with measured coverage"
    ],
    [
     "Evidence it operates",
     "Receipts per in-scope action"
    ],
    [
     "Exposure measurement",
     "Countable actions with bounded values"
    ],
    [
     "Claims adjudication",
     "Per-action evidence of what was authorised"
    ],
    [
     "Reinsurance or excess placement",
     "Evidence to present to the commercial market"
    ]
   ]
  },
  {
   "type": "p",
   "html": "The last row is where this eventually pays. A captive that has accumulated three years of instrumented loss data is in a position to buy excess cover commercially, because it can present the one thing the market lacks."
  },
  {
   "type": "h2",
   "text": "The realistic path"
  },
  {
   "type": "ol",
   "items": [
    "Retain the risk in the captive, because there is no alternative at a sensible price.",
    "Bound it with enforced delegation scopes, so the maximum loss is a number.",
    "Instrument authorisation on the consequential subset, producing per-action evidence.",
    "Accumulate loss and near-miss data with the control's coverage rate alongside it.",
    "Approach the commercial market for excess layers with evidence rather than assertions."
   ]
  },
  {
   "type": "p",
   "html": "Step five is a multi-year proposition and it is how this category eventually becomes insurable. The enterprises that instrument first will be the ones that can buy cover first, which is a commercial advantage that has nothing to do with security."
  },
  {
   "type": "p",
   "html": "This describes risk financing structures at a general level and is not insurance, tax or legal advice. Captive formation and regulation are jurisdiction-specific; take specifics to your advisers."
  },
  {
   "type": "h2",
   "text": "Bounding the exposure so it can be priced"
  },
  {
   "type": "table",
   "caption": "What delegation scopes give an actuary",
   "head": [
    "Instrumented",
    "Actuarial value"
   ],
   "rows": [
    [
     "Actions per period",
     "An exposure base that did not exist"
    ],
    [
     "Per-action value ceiling",
     "A computable maximum loss"
    ],
    [
     "Aggregate ceiling per period",
     "A bound on correlated loss"
    ],
    [
     "<strong style=\"font-weight:600\">Control coverage rate</strong>",
     "<strong style=\"font-weight:600\">A credit that can be justified</strong>"
    ]
   ]
  },
  {
   "type": "p",
   "html": "Without these, the theoretical maximum loss from a compromised agent is ‘whatever it can reach’, which no actuary can work with. With them it is a number."
  },
  {
   "type": "h2",
   "text": "Objections and honest limits"
  },
  {
   "type": "p",
   "html": "<strong style=\"font-weight:600\">“A captive is just moving money between pockets.”</strong> It is, and the discipline is often greater: a regulator, an auditor and your own actuary ask the same questions a commercial underwriter would, and the answers set your capital requirement."
  },
  {
   "type": "p",
   "html": "<strong style=\"font-weight:600\">“This is a multi-year play.”</strong> It is. The enterprises instrumenting now are the ones that will be able to buy excess cover commercially first, because they will hold the loss data the market lacks."
  }
 ],
 "faq": [
  {
   "q": "Why won't commercial insurers write agent liability?",
   "a": "Exposure is undefined, loss history is short, aggregation risk is real, and attribution between agent, operator and third party is unsettled — which makes triggers hard to draft."
  },
  {
   "q": "Does a captive reduce the risk?",
   "a": "No. It changes who bears and prices it. The discipline is often greater because the regulator, auditor and actuary ask the same questions."
  },
  {
   "q": "What does the actuary need?",
   "a": "An exposure base and loss data. Instrumented authorisation makes actions countable and bounds the value at risk per action, which is what turns this into a priceable layer."
  },
  {
   "q": "How does this eventually reach the commercial market?",
   "a": "Accumulated instrumented loss data is the thing the market lacks. An enterprise with three years of it can present evidence rather than assertions for excess layers."
  }
 ],
 "sources": [
  {
   "t": "NAIC — captive insurance and risk retention groups",
   "u": "https://content.naic.org/cipr-topics/captives-and-risk-retention-groups"
  },
  {
   "t": "Actuarial literature on pricing emerging risks with limited loss data."
  },
  {
   "t": "Insurance market commentary on autonomous system and AI liability coverage."
  },
  {
   "t": "NAIC — cyber risk resources",
   "u": "https://content.naic.org/cipr-topics/cyber-risk"
  }
 ],
 "related": [
  {
   "slug": "cyber-insurance-actuarial-crisis-deepfake-warranties",
   "title": "Underwriting on questionnaire answers",
   "category": "Definitional"
  },
  {
   "slug": "my-agent-did-defense-businesses-will-dispute",
   "title": "The 'my agent did it' defence",
   "category": "Future of Work"
  },
  {
   "slug": "social-engineering-sub-limit-trap-10m-cyber",
   "title": "The social engineering sub-limit",
   "category": "Vertical"
  }
 ],
 "image": "https://cdn.twc.sh/images/igcache/Captive%20Financing%20Agent%20Risk/1500_900/blog.jpg",
 "wordcount": 939,
 "url": "/blog/captive-insurance-companies-self-insured-retentions-large-enterprises.html",
 "reading_time": "4 min read",
 "seo_title": "Financing agent risk through a captive insurer",
 "meta_description": "Commercial insurers price autonomous-system liability out of reach or decline it, so enterprises retain the risk and own the loss control.",
 "hub": {
  "slug": "topics/cyber-insurance",
  "title": "Cyber insurance and risk transfer"
 },
 "answer": "You retain it, and then you own the loss control problem. Commercial insurers price unbounded autonomous-system liability out of reach or decline it, because the exposure is undefined, there is no loss history, and attribution between agent, operator and third party is unsettled.",
 "answer_q": "How do you finance agent risk when nobody will write it?",
 "glossary": [
  {
   "term": "Captive",
   "def": "An insurer owned by the organisation it insures, used where the commercial market will not write a risk sensibly."
  },
  {
   "term": "Exposure base",
   "def": "The measurable quantity a rate is applied to — which for agent risk does not currently exist."
  },
  {
   "term": "Excess layer",
   "def": "Cover above a retention, which becomes purchasable once loss data exists."
  }
 ],
 "checklist": {
  "title": "Financing agent risk",
  "id": "finance",
  "desc": "Four steps.",
  "steps": [
   {
    "name": "Retain it — there is no alternative at a sensible price.",
    "text": "Start from that honestly."
   },
   {
    "name": "Bound it with enforced delegation scopes.",
    "text": "So maximum loss is computable."
   },
   {
    "name": "Instrument authorisation on the consequential subset.",
    "text": "Producing per-action evidence."
   },
   {
    "name": "Accumulate loss and near-miss data.",
    "text": "With coverage rate alongside it."
   }
  ]
 },
 "cta": {
  "title": "Where this fits in Manav",
  "html": "Manav produces the artefact underwriting, claims and forensics all lack: a per-action receipt verifiable without the insured's cooperation, and a measurable coverage rate.",
  "href": "../docs.html",
  "label": "See the evidence"
 }
}