What Boards Should Demand on Claims Leakage in Health Portfolios

What Evidence Should Actually Satisfy a Board on This Risk

A board hearing that claims leakage is "being monitored" should treat that phrase as the start of a conversation, not the end of one. Claims leakage in a high-volume health portfolio carries real, quantifiable financial consequence, and boards overseeing life and health reinsurers have a legitimate governance interest in confirming that consequence is actually being managed, not simply described as managed.

This piece sets out specifically what a board should ask, and what a genuinely satisfactory answer looks like in each case. None of these questions require an actuarial or claims background to ask effectively, they require knowing which specific evidence separates real control from a comfortable-sounding assurance.

Why Is This Genuinely a Board-Level Governance Issue?

It is a board-level issue because unaddressed leakage directly distorts the loss experience feeding into pricing, reserving, and capital decisions, all of which fall squarely within a board's oversight responsibility. A board that oversees pricing adequacy and capital allocation without confirming the underlying claims data feeding those decisions is reliable has, in effect, only completed part of its actual oversight job.

Claims leakage is sometimes treated internally as a purely operational, department-level matter, beneath the threshold of what warrants board attention. That framing understates the issue significantly, given that industry estimates place fraud, waste, and abuse losses alone at potentially "more than $300 billion" annually across the health care system, a scale that easily clears any reasonable board materiality threshold for a book of meaningful size.

What Specific Data Should the Board Actually Request?

The board should request the current tracked leakage rate, the sampling methodology behind it, the trend across recent reporting periods, and the specific remediation actions taken in response to prior findings. Each of those four elements tests a different aspect of whether the underlying control is genuinely functioning, rather than simply existing on paper.

The leakage rate itself shows current status, the methodology shows whether that rate is credible, the trend shows whether the situation is improving or deteriorating, and the remediation record shows whether findings actually translate into action. A management presentation offering only the first of these four elements, the headline number, without the supporting detail, has given the board a data point without giving it the ability to actually assess whether that data point can be trusted.

Is "We Have Not Found Significant Leakage" an Acceptable Answer on Its Own?

No, that answer requires a specific follow-up question about the sampling methodology that produced it, since a limited or non-representative sample can easily produce a falsely reassuring conclusion. A sample restricted to low-frequency, high-severity claims that already receive individual manual review will predictably find little additional leakage, simply because that segment was never where leakage concentrates in the first place.

Boards should specifically ask whether the sample covered high-frequency, moderate-severity claims, the segment most likely to carry undetected leakage precisely because it receives the least individual scrutiny in normal claims operations. An answer confirming that specific coverage carries far more weight than a general assurance that "a sample was reviewed" without further detail.

How Should Oversight Differ Between Owned Operations and Delegated Authority?

Delegated authority arrangements deserve materially closer board scrutiny, since the board has inherently less direct assurance about underlying claims controls than it would have over an operation the organization runs itself. A third-party administrator or cedant operating under delegated authority controls the daily claims process, and the reinsurer's own audit tools may have no contractual reach into that operation without specific rights negotiated in advance.

Boards should specifically ask whether current delegated authority agreements include explicit audit rights and mandatory leakage reporting, and if not, when those terms will be addressed at the next renewal. This is a governance gap that is entirely fixable prospectively but genuinely difficult to retrofit into an agreement already in force, which makes early identification valuable.

What Should Trigger an Immediate, Out-of-Cycle Board Briefing?

A material, unexplained increase in the tracked leakage rate, or any audit finding suggesting leakage significantly larger than previously reported, should both trigger management escalating to the board before the next regularly scheduled meeting. Waiting for a quarterly board cycle to report a material adverse finding on a fast-compounding risk like claims leakage unnecessarily extends the window during which the underlying problem continues to grow unaddressed.

Boards should set this expectation explicitly in advance, rather than leaving the escalation decision to management's own judgment about what qualifies as material enough to warrant an out-of-cycle briefing. A pre-agreed threshold, similar to the escalation triggers recommended for lapse assumption governance, removes ambiguity about when this specific risk requires breaking from the normal reporting rhythm.

How Should This Risk Connect to the Board's Broader Risk Appetite Statement?

Claims leakage should carry an explicit, quantified tolerance level within the broader claims and underwriting risk appetite statement, rather than being treated as an unstated assumption of zero tolerance that nobody has actually defined or measured against. An unstated assumption of zero tolerance is not a real risk appetite, since it provides no actual threshold against which management's performance can be judged.

A specific, quantified tolerance, expressed as a target leakage rate range, gives both management and the board a shared, objective standard, converting an abstract governance conversation into a measurable, trackable one. This connects to the treaty economics oversight described in medical trend outpacing treaty economics, where a similarly explicit, quantified tolerance improves board oversight of a related financial risk.

Should Claims Leakage Performance Influence Executive Compensation?

It can reasonably influence claims and underwriting leadership incentive compensation, since tying a measurable, board-visible metric to compensation reinforces that sustained detection is treated as an ongoing organizational priority rather than a one-time initiative that fades once the initial project concludes. Compensation structures send a clear signal about what an organization actually prioritizes, regardless of what its stated policies say.

A Claims Financial Governance AI Agent can supply the board with the ongoing, defensible metric needed to support this kind of incentive structure, removing any question about whether the underlying number can be trusted for compensation purposes. That level of measurement rigor is exactly what separates a genuine, board-supported governance structure from one that exists only in policy language.

How Should the Board Compare Leakage Performance Across Multiple Cedants?

The board should ask management for a consistent, standardized leakage metric applied uniformly across all cedants in the ceded health portfolio, since comparing cedants using each one's own self-defined measurement approach produces numbers that look comparable but are not actually measuring the same thing. A cedant reporting a low leakage rate using a narrow definition and a limited sample is not necessarily performing better than one reporting a higher rate using a broader, more rigorous methodology, and a board unaware of this distinction risks drawing exactly the wrong conclusion from a simple side-by-side comparison.

Standardizing the metric definition across the ceded portfolio, ideally specified directly in treaty terms rather than left to each cedant's own internal reporting convention, is what makes genuine cross-cedant comparison possible in the first place. This standardization effort pays off directly at renewal time, since it lets the board and management identify which specific cedant relationships carry disproportionate leakage risk relative to comparable peers, rather than relying on anecdote or an inconsistent, apples-to-oranges set of self-reported figures.

A board that receives a standardized, cross-cedant leakage comparison at least annually gains a genuinely useful portfolio management tool, one that surfaces where remediation effort and renewal negotiation leverage should concentrate rather than spreading equal scrutiny uniformly across every cedant regardless of actual risk profile. That prioritization capability is a direct, practical benefit of insisting on standardized measurement, not just a governance nicety.

How Should the Board Handle a Cedant That Resists Providing Leakage Data?

The board should expect management to treat sustained resistance to providing standardized leakage data as a risk signal in its own right, worth weighing directly in renewal and capacity allocation decisions for that specific cedant relationship. A cedant with genuinely well-controlled claims operations typically has little reason to resist reasonable, standardized reporting requirements, so persistent resistance itself carries diagnostic value, independent of whatever specific leakage rate eventually gets reported.

Boards should ask management how many cedant relationships currently fall short of the standardized reporting expectation, and what specific plan exists to close that gap at the next renewal for each one. Treating this as a portfolio-wide tracked item, rather than a case-by-case conversation revisited informally, keeps consistent pressure on the standardization effort across every relevant cedant relationship rather than letting exceptions accumulate quietly over successive renewal cycles.

Boards overseeing life and health reinsurers do not need deep claims operations expertise to oversee this risk well. They need to insist on specific, quantified, methodologically sound evidence rather than general assurance, and treat gaps in that evidence, particularly around delegated authority arrangements, as a governance finding requiring a deadline and a named owner, not a detail to revisit at some later, unspecified point.

Sources

• NHCAA: The Challenge of Health Care Fraud
• Milliman: How effective claims auditing can save healthcare dollars lost to fraud, waste, and abuse