(1) In order to
address the need for appropriate oversight by senior management and by the
board of directors, or a committee thereof charged with the responsibility for
supervising investments, and to provide for a comprehensive risk management
process for derivative instruments, an insurer shall establish the following
with respect to derivative transactions:
(a)
Appropriate limits for various identified risks relevant to the derivative
transactions used by the insurer;
(b) Procedures and practices that control the
nature and amount of such risks;
(c) Adequate systems or processes for
identifying and measuring such risks;
(d) Systems or processes for documenting,
monitoring and reporting risk exposures on a timely basis; and
(e) Systems or processes of internal review
and audit to ensure the integrity of the overall risk management
process.
(2) The board of
directors, or a committee thereof charged with the responsibility for
supervising investments, shall receive and review quarterly reports,
including:
(a) Information to ascertain that all
derivative transactions have been made in accordance with delegations,
standards, limitations and investment objectives contained in the derivative
use plan;
(b) The outstanding
derivative positions; the unrealized gains or losses thereon;
(c) The derivative transactions closed during
the report period;
(d) A
performance review of the derivative transactions;
(e) An evaluation of the risks and benefits
of the derivative transactions; and
(f) Other information necessary to ensure
that the internal control procedures are being followed.
(3) The board of directors, or a committee
thereof charged with the responsibility for supervising investments, shall
establish the following management oversight standards for derivative
transactions:
(a) The board of directors, or a
committee thereof charged with the responsibility for supervising investments,
has an affirmative obligation to prior approve its desired risk tolerance
levels. Management shall appropriately translate these risk tolerance levels
into effective policies and procedures that address both individual
transactions and entire portfolios;
(b) Management and the board of directors, or
a committee thereof charged with the responsibility for supervising
investments, shall receive sufficient information to assess the strengths and
limitations of the insurer's risk measurement systems in order to determine
appropriate risk limits. The board of directors, or a committee thereof charged
with the responsibility for supervising investments, shall also review
management's response to strengths and limitations identified through oversight
processes such as stress testing, independent validation and back-testing of
risk measurement models. Management and the board of directors, or a committee
thereof charged with the responsibility for supervising investments, shall
consider the information identified by the oversight processes, including the
potential for indirect effects of downside performance beyond the insurer's
finances, when they determine and communicate their risk profile;
(c) When management or the board of
directors, or a committee thereof charged with the responsibility for
supervising investments, identifies weaknesses in the risk management process,
they shall consider alternatives and take steps to strengthen that
process;
(d) Actions shall be taken
to correct any deficiencies in internal controls relative to derivative
transactions, including any deficiencies determined by the independent
certified public accountant in the evaluation of accounting procedures and
internal controls;
(e) Risk
oversight functions shall possess independence, authority, and expertise;
and
(f) Issuer and counterparty
credit decisions for each transaction shall be consistent with the overall
credit standards of the insurer.