Can Your Board Prove Management Controls Behavioral Lapse Model Risk?

The Question Every Board Should Ask Before Accepting That Lapse Risk Is Under Control

Boards routinely receive assurance that lapse risk is being managed appropriately. That assurance, on its own, is worth very little without evidence sitting behind it, and the gap between assurance and evidence is exactly where governance failures on this specific risk tend to originate.

A board member does not need an actuarial background to ask the right questions here. They need to know which specific pieces of evidence separate a genuinely controlled risk from one that is simply being described as controlled in a quarterly update.

This piece is written for that board member. It lays out exactly what to ask, and what a credible answer actually looks like in each case.

What Evidence Actually Demonstrates Control, Rather Than Just Describing It?

Genuine evidence of control includes documented monitoring results, a specific date for the last stress test, and a record of what happened the last time actual lapse experience genuinely breached the pre-agreed threshold. Each of those three items is checkable and specific, unlike a general assurance that "lapse risk is being monitored appropriately."

A board that accepts general assurance without asking for the underlying record is, in practice, delegating its oversight responsibility entirely to management's own self-assessment. That is a reasonable starting point for a low-risk item, but behavioral lapse risk, with its documented history of producing sudden, correlated financial impact, does not qualify as low-risk on most life and health books.

Is a Written Risk Appetite Statement Sufficient Evidence on Its Own?

No, a risk appetite statement without evidence of testing against it is a policy document, not proof that the policy is actually being followed. Many reinsurers have well-written risk appetite language for lapse risk sitting in a governance manual that has not been operationally tested against real portfolio data in over a year.

The distinction matters because a policy document describes intent, while testing evidence describes outcome. Boards should specifically ask when the stated risk appetite was last tested against actual portfolio experience, not just when the policy document was last reviewed and formally approved.

What Single Question Most Effectively Exposes Whether Monitoring Is Real?

Asking for the specific date and outcome of the most recent behavioral lapse stress test is the single most effective diagnostic question available to a board. A management team with a genuinely functioning control answers immediately, with a date, a scenario set, and a specific capital or reserve impact figure.

A management team without a genuinely functioning control tends to answer vaguely, citing an ongoing process or a plan to complete testing soon. That vagueness is itself diagnostic information, and boards should treat it as such rather than accepting it as a satisfactory answer and moving on to the next agenda item.

This mirrors the diagnostic approach covered in the governance controls reinsurers need for behavioral lapse risk, where the same specific, checkable evidence standard applies to management's own internal audit function.

How Should the Board Respond If Management Cannot Answer Specifically?

The board should treat the inability to answer specifically as the risk finding itself, not as a minor process gap to be revisited later. A specific remediation plan, with a firm deadline and a named accountable executive, should follow directly from that finding, rather than a general commitment to "improve monitoring going forward."

Boards that accept vague commitments without a deadline typically find the same vague answer recurring at the next scheduled review, sometimes for several cycles running. Attaching a hard deadline and a named owner is what converts a governance gap from a recurring conversation into an actual, tracked remediation item.

What Is the Audit Committee's Specific Role Here?

The audit committee's specific role is confirming independently that the monitoring and escalation controls described in operating policy are actually functioning, rather than relying solely on management's own self-reported status. That independent confirmation is the entire point of having an audit committee distinct from the executive team that owns the underlying risk.

Independent testing might include the audit committee directly requesting the raw actual-to-expected data for a recent period, rather than accepting only management's summarized conclusion about it. That level of independent verification is standard practice for financial reporting controls and deserves the same standard applied to a risk with comparable potential financial impact.

How Does Rating Agency Scrutiny of This Risk Compare to Board-Level Scrutiny?

Rating agencies primarily test whether held capital is adequate under standard formula stress scenarios, such as the Solvency II mass lapse stress of an immediate 40% lapse, while board oversight should go further and confirm the underlying monitoring process that would catch a real deviation early enough to act on it. Capital adequacy under a standard scenario answers "could we survive this specific shock," while board-level process oversight answers the more operationally useful question of "would we actually catch a real deviation in time to respond before it compounds."

A reinsurer passing rating agency capital tests while lacking genuine board-level process oversight can still be caught badly off guard by a slow-building deviation that a standard formula scenario was never designed to detect early.

Should Board Oversight Intensity Differ by Product Mix?

Yes, portfolios concentrated in guarantee-heavy savings products carrying real mass lapse exposure warrant a materially higher oversight cadence than portfolios weighted toward pure protection business. Mass lapse risk, as Fitch's analysis of European life insurers notes, "typically applies to life insurance traditional savings products, which may include minimum guarantees," making that specific product category the highest-priority segment for board attention.

A board applying the same oversight cadence uniformly across a mixed book, without weighting attention toward the higher-risk product segments, is likely under-scrutinizing exactly the part of the portfolio most capable of producing a sudden, material loss. Segmenting oversight cadence by product risk profile, similar to how monitoring itself should be segmented operationally, is a straightforward and low-cost governance improvement.

An AI-driven Underwriting Assumption Validator AI Agent can support this oversight function directly, by producing an independent, continuously updated validation record the board can request at any time rather than waiting for a scheduled quarterly summary. That kind of standing, on-demand evidence is precisely what turns board oversight from a periodic check-in into genuine, continuous control.

Should Board Reporting Cadence Change During an Active Stress Period?

Yes, board reporting cadence on lapse experience should shift from the standard quarterly rhythm to a monthly or even more frequent cadence once a qualifying stress event, such as a sharp rate move or a recessionary signal, is actually underway. Waiting for the next regularly scheduled quarterly meeting during an active, unfolding stress period leaves the board relying on information that may already be materially out of date by the time it is presented.

A pre-agreed protocol defining exactly which conditions trigger this heightened cadence, and how long it continues after the stress event appears to have passed, removes the awkward judgment call of deciding in the moment whether the situation "really" warrants more frequent reporting. Boards that only ever discover a stress period was underway after reviewing a delayed quarterly report have effectively ceded real-time oversight of exactly the period when this specific risk is most active and most consequential.

This heightened-cadence principle mirrors the escalation logic covered in what boards should demand on claims leakage, where a comparable shift to more frequent reporting is warranted once a material adverse finding first surfaces, rather than waiting for the next scheduled cycle. Building both protocols, for lapse stress and for claims leakage, into a single standing board reporting policy avoids re-litigating the same escalation logic separately for each individual risk category.

What Should the Board Expect From Management Immediately After a Stress Event Passes?

Immediately after an acute stress event passes, the board should expect a formal post-event review from management, quantifying the actual deviation observed, the financial impact realized, and any changes made to monitoring or assumptions as a result. Treating the end of a visible stress event as the end of the topic, without a formal closing review, risks losing the specific lessons that event generated, precisely the ones most likely to improve the organization's response the next time a comparable event occurs.

A post-event review does not need to be lengthy to be valuable, a concise summary covering what was observed, what was done, and what will change going forward is usually sufficient to capture the material lessons. Boards that consistently request this kind of closing review build a cumulative institutional record across successive stress events, which becomes genuinely valuable during the next episode, when management can draw directly on documented experience rather than relying on individual memory of how a similar situation played out previously.

Boards do not need to become actuaries to oversee this risk effectively. They need to insist on specific, dated, checkable evidence instead of general assurance, and treat the absence of that evidence as a governance finding requiring its own deadline and owner, not as a detail to revisit at some unspecified future meeting.

Sources

• Milliman: Lapse risk reinsurance
• Reinsurance News: Mass lapse remains a threat to European life insurers, Fitch