Cover Story

Building Resiliency in the Face of Climate Change

Climate change demands that companies take a collaborative approach to risk management.
By: | June 2, 2014 • 10 min read

Failing to prepare for extreme weather events cost the United States $1.15 trillion in economic losses from 1980 to 2010, according to the U.S Global Change Research Program (USGCRP). The more telling number comes from a study by Munich Re, which put insured losses for North America during the same period at $510 billion. No doubt government was forced to take on the lion’s share of the rest, but U.S. business also paid out of pocket for a fair amount of the remaining $640 billion in losses.

Here’s another sobering figure. A Business Continuity Institute study indicates that 40 percent of businesses affected by extreme weather for extended periods of time never recover or reopen. It’s likely that for much of the 60 percent that stay open, full recovery is a long and painful process.

Advertisement




The forces behind these events are gaining steam and they are indiscriminate. From December 2013 through February 2014, drought-stricken California recorded its warmest winter on record. Across the rest of the country, including the South, winter storms were merciless, dealing at least a $15 billion blow to U.S. businesses.

Let the politicians bicker all they want about who or what is to blame for climate change. USGCRP projects another $1.2 trillion in losses through 2050. So for those with boots on the ground and a business to run, it doesn’t matter who’s to blame. Climate change is not a future risk, it’s a right-now risk, and the only question that matters is, “Now what?”

Some of the answers to that may surprise risk managers and other business leaders.

The Chocolate Elephant

Here’s what’s on the table. According to the most recent report from the United Nations’ Intergovernmental Panel on Climate Change, ice caps are melting, sea ice in the Arctic is collapsing, water supplies are coming under stress, heat waves and heavy rains are intensifying, and coral reefs are dying. Coastal communities are under double threat from sea-level rise and from increased acidity as the waters absorb the carbon dioxide given off by cars and power plants. Organic matter frozen in Arctic soils since before civilization began is melting, decaying into yet more greenhouse gases.

Video: A description of the IPCC findings.

Slowing these trends may be possible, but reversing them is not. Therefore, the altered climate — with its attendant storm frequency increases, droughts, wildfires, intense rainfalls, storm surges, the “polar vortex,” the rising sea level and the rest of it — is ours to keep.

Evidence of this mounts daily. Just within the days surrounding the 2014 RIMS conference, wildfires ravaged states on the East and West coasts, tornadoes ripped a path across the South Central United States, and severe floods battered Florida and Alabama. That convergence of calamities no longer seems to strike anyone as shocking. In the years and decades to come, these events are expected to increase in both frequency and severity. In other words, welcome to the new normal.

Superstorm Sandy tested the mettle of many, and served as a wake-up call to those who underestimated the complexity of the climate risks they face. Organizations were brought up short by just how underprepared they really were — and what that could mean to their bottom lines. Risk managers, both public and private, are beginning to parse out what climate change really means and what its total implications are for the organizations they serve.

That task can seem daunting. There are multiple perils involved, which have an exponential impact on possible exposures.

“One of the challenges of climate risk is that for most people, it’s the chocolate elephant — it’s just too big to eat,” said Chris Smy, managing director and global practice leader with Marsh’s environmental practice. That makes it tempting to throw up one’s hands and say, “I can’t solve this.”

The threat seems both too large and too distant. Many reports and articles about climate change include the phrase “by the end of the century …” easily lulling leaders into thinking of it as something that need not be addressed right now, especially when matters such as cyber risk seem so much more immediately pressing.

 Chris Smy, managing director, global practice leader, Marsh

Chris Smy, managing director, global practice leader, Marsh

But the increased frequency and severity of extreme weather events is apparent. At the same time, we’re seeing populations gravitate toward cities, and scientists have concluded that cities are warming at a faster rate than rural areas. These facts alone make for a dangerous combination. The population shift toward urban areas also means that many companies don’t have the option to avoid doing business in exposure-prone areas. They need to be where the customers are.

“You have more frequency and severity, and that is exacerbated by more people at risk and more assets to be damaged,” said Bob Petrilli, head of North America, Swiss Re Corporate Solutions. “It’s a triple whammy — it’s multiple economic issues coming together to make things that much worse.”

In the face of these challenges, a dialogue has begun among both corporations and public entities about the concept of resiliency and how to achieve it. What “resilience” means will be different for every company. But it must encompass both the means to minimize exposures and to plan for all contingencies, as well as a clear roadmap to recovery.

Advertisement




Assessing exposures surrounding climate risk is a more acrobatic exercise than some risk managers are accustomed to. It will take a deep dive into the “what ifs” of each possible peril, looking beyond clear property risks and into anything that could impact a company’s supply chain, as well as a thorough examination of factors that could create business continuity disruptions. For diligent companies, that sounds like standard best practices, but climate risk gives it a new flavor many have not yet tasted. What if the increased frequency of storms, over time, erodes the reliability of power delivery to one or several of my facilities? Could storm surge threaten any of the key bridges we use to transport products out or bring raw materials in? What if there’s a lack of potable water in the city where my key factory is located, or their food supply is sharply diminished by drought conditions? What if threats to the food or water supply create new diseases that incapacitate a large percentage of my workforce in that region?

“One of the challenges of climate risk is that for most people, it’s the chocolate elephant — it’s just too big to eat.” — Chris Smy, managing director and global practice leader, Marsh

That’s not to say that companies need jump on every risk identified. It’s a matter of eliminating the element of surprise. “The horizon may be different,” said John Marren, director of global risk and insurance management for CSL Behring, at a session at this year’s RIMS conference, “but we wanted to have it all on the radar.”

A New Discussion

As companies confront the real problems posed by climate risk, the more they will be faced with the reality that individual companies cannot effectively mitigate every aspect on their own.

“What we’re finally starting to notice is a shift toward this idea of comprehensive risk management,” said Alex Kaplan, vice president, global partnerships for Swiss Re. “It’s not just about your own resilience but it’s also about the community around you. For instance, if you have, say, a corporation that’s based in a city. They could have state-of-the-art technology and could be insured to the teeth, but the city around them ends up collapsing.”

A poignant and very real example of this, said Kaplan, is the Toyota plant in the Turkish city of Van. “It was up to the most incredible standards of seismic protection. So when they had an earthquake in 2011, the factory was virtually unscathed.” However, Kaplan explained, 600 people in the surrounding community were killed, 6,000 buildings were destroyed and 60,000 people were left homeless. “So even though Toyota was physically OK, none of its workers could get to work. And frankly, even if they could get to work, they probably had bigger problems to worry about.”

The corporation with the best risk management, the best strategy and the best risk transfer still has to be aware of where they’re located and what around them could also be impacted and prevent them from moving forward, said Swiss Re’s Petrilli.

Bob Petrilli, head of head of North America, Swiss Re Corporate Solutions

Bob Petrilli, head of North America, Swiss Re Corporate Solutions

“A corporation can’t really survive and thrive unless it’s in a location that has a resiliency plan, and if you’re not talking about that together, then you’re never going to get there,” he said. “This public-private partnership type of approach and thought process is relatively new to our industry — but I think it is critically important.”

These ideas — which are spreading slowly — represent a fundamental shift in how climate risk is perceived.

“Many of us in the industry have been focusing on not just the idea of resiliency but on this overarching concept of enterprise risk management, but it’s also broader, it’s global, it’s about interconnectedness,” said Lindene Patton, chief climate product officer at Zurich.

However, she added, “People are not accustomed to thinking that broadly.” So, no doubt, there are some that are going to balk at such a bold departure from tradition. Put in perspective, though, it’s only a logical step for companies that are already engaged in their communities from a corporate citizenship standpoint.

“Corporations like to be integrated with the communities they’re in, they support things within the community to raise their own stature,” said Petrilli.

Advertisement




“But they probably haven’t in the past met with the city or the municipality from a risk management standpoint to discuss things like ‘What if this? What would we do?’ Once that dialogue starts, it becomes more of a ‘We’ve all got a dog in this fight’ conversation.”

Experiencing the pain of losses will increasingly drive organizations toward this perspective.

“A corporation can’t really survive and thrive unless it’s in a location that has a resiliency plan, and if you’re not talking about that together, then you’re never going to get there.” Bob Petrilli, head of North America, corporate solutions, Swiss Re

A good example, said Marsh’s Smy, is how, since Superstorm Sandy, there’s been a lot of activity in the New York tri-state area around trying to prepare, as a region, for repeat events of that magnitude.

“There’s an opportunity for organizations to engage with local government,” he said.

As organizations look through the lens of climate risk as a way to assess their risk profiles, they’ll begin to recognize that there are areas they can’t control, said Smy, “and they may well decide, ‘We can no longer be a bystander.’ Once you reach that conclusion … then there’s action that can be taken.” That may take the form of lobbying for changes, investing money in nonprofits conducting resilience studies, seeking out public-private partnerships, or even investing in infrastructure.

“The more we talk, the more we get to the point where there is a joint approach to an event,” said Petrilli. “It kind of screams for some collaboration.”

At the very least, opening a dialogue will help flesh out the breadth of the exposures so that action plans can be developed around them. “What people are beginning to focus on is sharing information and on the idea of public-private partnerships,” said Zurich’s Patton. “[It’s about] trying to just define these externalities … Does the power work? Can you drive down a road? Can you get gasoline? Is the metro running? Those are all questions we’re not used to asking. We’re used to only worrying about the things that are under our control.”

For risk managers who find that the idea of community partnerships is a hard sell to the C-suite, Patton added that the benefits go beyond managing climate risk. Companies can approach their community’s climate risk issues much as they would any other public service project, she said. “Not something huge, not something that would go outside their economic model, but just a twist in the way that they’re interacting with their communities. It has all sorts of co-benefits that come with it … things like brand, value, advertising. It’s a way to rethink how they get their name out in the community” in a way which is moving toward resilience while delivering other benefits.

Strategic Planning

The nature of climate risk dictates that companies factor climate changes into corporate decision-making just the same way that companies might evaluate market conditions, tax implications, political instability or any other key exposure.

That long-range scope might not be the responsibility of risk management in some organizations.

“That looks a lot more like strategy,” said Marsh’s Smy. “That’s planning, more than managing day-to-day risk.”

Climate risk and resiliency, then, are the place where strategy and risk management are converging. Savvy business leaders will view decisions through the lens of resiliency in order to protect the organization’s interests.

Ultimately, said Smy, this can better position risk managers within an organization. “It creates an opportunity to address something that’s a strategic issue, at the board level, and I think that’s a great opportunity for risk managers to be thoughtful about it and not be kept in the box of insurance.”

“Resiliency is an opportunity for risk managers to elevate their place at the table,” said Andrew Thompson, global lead for catastrophe risk and insurance at Arup.

A true chief risk officer, said Zurich’s Patton, can act as an adviser to other parts of the organization, to help them think more broadly about the effects of climate risk on their decision-making process.

“The goal is to have people — as they’re thinking and planning — ask themselves, ‘Will this make us more or less resilient?’ ” said Max Young, communications director for 100 Resilient Cities, an initiative focused on building global resilience.

Corporate risk management has evolved into a sophisticated function in most corporations, said Petrilli. And now it is being further refined. “It has gone beyond insurance buying and into ERM,” he said.

“Resiliency is an opportunity for risk managers to elevate their place at the table.” — Andrew Thompson, global lead, catastrophe risk and insurance, Arup

“The board of directors needs to know not only what their operations are going to look like in the next year and the next cycle, but also that nothing is going to knock that off track.” And they also need to know that if an event does happen, there’s a well-thought-out plan in place that will maintain the company’s vitality. “That takes real strategic thinking,” he said.

Related R&I Coverage:

Climate Change Hits the Courts

Expanding the Definition of Expected Risks

The Emerging Tort Storm

Michelle Kerr is associate editor of Risk & Insurance. She can be reached at [email protected]

More from Risk & Insurance

More from Risk & Insurance

Risk Report: Hospitality

Bridging the Protection Gap

When travelers stay home, hospitality companies recoup lost income through customized, data-defined policies.
By: | October 12, 2017 • 9 min read

In the wake of a hurricane, earthquake, pandemic, terror attack, or any event that causes carnage on a grand scale, affected areas usually are subject to a large “protection gap” – the difference between insured loss and total economic loss. Depending on the type of damage, the gap can be enormous, leaving companies and communities scrambling to obtain the funds needed for a quick recovery.

Advertisement




RMS estimates that Hurricane Harvey’s rampage through Texas could cause as much as $90 billion in total economic damage. The modeling firm also stated that “[National Flood Insurance Program] penetration rates are as low as 20 percent in the Houston area, and thus most of the losses will be uninsured.”

In addition to uninsured losses from physical damage, many businesses in unaffected surrounding areas will suffer non-physical contingent business interruption losses. The hospitality industry is particularly susceptible to this exposure, and its losses often fall into the protection gap.

Natural catastrophes and other major events that compromise travelers’ safety have prolonged impacts on tourism and hospitality. Even if they suffer no physical damage, any hotel or resort will lose business as travelers avoid the area.

“The hospitality industry is reliant on people moving freely. If people don’t feel safe, they won’t travel. And that cuts off the lifeblood of the industry,” said Christian Ryan, U.S. Hospitality and Gaming Practice Leader, Marsh.

Christian Ryan
U.S. Hospitality and Gaming Practice Leader, Marsh

“People are going away from the devastation, not toward it,” said Evan Glassman, president and CEO, New Paradigm Underwriters.

Drops in revenue resulting from decreased occupancy and average daily room rate can sometimes be difficult to trace back to a major event when a hotel suffered no physical harm. Traditional business interruption policies require physical damage as a coverage condition. Even contingent business interruption coverages might only kick in if a hotel’s direct suppliers were taken offline by physical damage.

If everyone remains untouched and intact, though, it’s near impossible to demonstrate how much of a business downturn was caused by the hurricane three states away.

“Hospitality companies are concerned that their traditional insurance policies only cover business interruption resulting from physical damage,” said Bob Nusslein, head of Innovative Risk Solutions for the Americas, Swiss Re Corporate Solutions.

“These companies have large uninsured exposure from events which do not cause physical damage to their assets, yet result in reduced income.”

Power of Parametrics

Parametric insurance is designed specifically to bridge the protection gap and address historically uninsured or underinsured risks.

Parametric coverage is defined and triggered by the characteristics of an event, rather than characteristics of the loss. Triggers are custom-built based on an insured’s unique location and exposures, as well as their budget and risk tolerance.

“Triggers typically include a combination of the occurrence of a given event and a reduction in occupancy rates or RevPar for the specific hotel assets,” Nusslein said. Though sometimes the parameters of an event — like measures of storm intensity — are enough to trigger a payout on their own.

For hurricane coverage, for example, one policy trigger might be the designation of a Category 3-5 storm within a 100-mile radius of the location. Another trigger might be a 20 percent drop in RevPAR, or revenue per available room. If both parameters are met, a pre-determined payout amount would be administered. No investigations or claims adjustment necessary.

Advertisement




The same type of coverage could apply in less severe situations where traditional insurance just doesn’t respond. Event or entertainment companies, for example, often operate at the whim of Mother Nature. While they may not be forced to cancel a production due to inclement weather, they will nevertheless take a hit to the bottom line if fewer patrons show up.

Christian Phillips, focus group leader for Beazley’s Weatherguard parametric products, said that as little as a quarter- to a half-inch of rain over a four- to five-hour period is enough to prevent people from coming to an event, or to leave early.

“That’s a persistent rainfall that will wear down people’s patience,” he said.

“A rule of thumb for parametric weather coverage, if you’re looking to protect loss of revenue when your event has not actually been cancelled, you will probably lose up to 20 to 30 percent of your revenue in bad weather. That depends on the client and the type of event, but that’s the standard we’ve realized from historical claims data.”

The industry is now drawing on data to establish these rules of thumb for more serious losses sustained by hospitality companies after major events.

“Until recently the insurance industry has not created products to address these non-physical damage business interruption exposures. The industry is now collaborating with big data companies to access data, which in turn, allows us to structure new products,” Nusslein said.

Data-Driven Triggers

Insurers source data from weather organizations that track temperature, rainfall, wind speeds and snowfall, among other perils, by the hour and sometimes by the minute. Parametric triggers are determined based on historical storm data, which indicates how likely a given location is to be hit.

“We try to get a minimum of 30 years of hourly data for those perils for a given location,” Phillips said.

“Global weather is changing, though, so we focus particularly on the last five to 10 years. From that we can build a policy that fits the exposure that we see in the data, and we use the data to price it correctly.”

New Paradigm Underwriters collects their own wind speed data via a network of anemometers that stretch from Corpus Christi, Texas, all the way to Massachusetts, and works with modeling firms like RMS to gather additional underwriting information.

The hospitality industry is reliant on people moving freely. If people don’t feel safe, they won’t travel. And that cuts off the lifeblood of the industry.– Christian Ryan, U.S. Hospitality and Gaming Practice Leader, Marsh

While severe weather is the most common event of concern, parametric cover can also apply to terrorism and pandemic risks.

“We offer a terror attack quote on every one of our event policies because everyone asks for it,” said Beazley’s Phillips.

Advertisement




“We didn’t do it 10 years ago, but that’s the world we live in today.”

An attack could lead to civil unrest, fire or any number of things outside an insured’s control. It would likely disrupt travel over a wide geographic region.

“A terrorist event could cause wide area devastation and loss of attraction, which results in lost income for hospitality companies,” Nusslein said.

Disease outbreaks also dampen travel and tourism. Zika, which was most common in South America and the Caribbean, still prevented people from traveling to south Florida.

“Occupancy went down significantly in that region,” Marsh’s Ryan said.

“If there is a pandemic across the U.S., a parametric coverage would make sense. All travel within and inbound to the U.S. would go down, and parametric policies could protect hotel revenues in non-impacted areas. Official statements from the CDC such as evacuation orders or warnings could qualify as a trigger.”

Less data exists around terror attacks and pandemics than for weather, though hotels are taking steps to collect information around their exposure.

“It’s hard to quantify how an infectious disease outbreak will impact business, but we and clients are using big data to track travel patterns,” Ryan said.

Hospitality Metrics

Any data collected has to be verified, or “cleaned.”

“We only deal with entities that will clean the data so we know the historical data we’re getting is accurate,” Phillips said.

“There are mountains of data out there, but it’s unusable if it’s not clean.”

Parametric underwriters also tap into the insured’s historical data around occupancy and room rates to estimate the losses it may suffer from decreased revenue.

Bob Nusslein, head of Innovative Risk Solutions for the Americas, Swiss Re Corporate Solutions.

“The hospitality industry uses two key metrics to measure loss of business income. These include occupancy rate and revenue per available room, or RevPAR. These are the traditional measurements of business health,” Swiss Re’s Nusslein said.  RevPAR is calculated by multiplying a hotel’s average daily room rate (ADR) by its occupancy rate.

“The hotel industry has been contributing its data on occupancy, RevPAR, room supply and demand, and historical data on geographical and seasonal trends to independent data aggregators for many years. It has done an exceptional job of aggregating business data to measure performance downturns from routine economic fluctuations and from major ‘Black Swan’ events, like the 9/11 terrorist attacks, the 2008 financial crisis or the 2009 SARS epidemic.”

Claims history can also provide an understanding of how much revenue a hotel or an event company has lost in the past due to any type of business interruption. Business performance metrics combined with claims data determine an appropriate payout amount.

Like coverage triggers, payouts from parametric policies are specifically defined and pre-determined based on data and statistical evidence.

This is the key benefit of parametric coverage: triggers are hit, payment is made. With minimal or no adjustment process, claims are paid quickly, enabling insureds to begin recovery immediately.

Applying Parametric Payments

For hotels with no physical damage, but significant drops in occupancy and revenue, funds from a parametric policy can help bridge the income gap until business picks up again, covering expenses related to regular maintenance, utilities and marketing.

Because payment is not tied to a specific type or level of loss, it can be applied wherever insureds need it, so long as it doesn’t advance them to a better financial position than they enjoyed prior to the loss.

Advertisement




Parametric policies can be designed to fill in where an insured has not yet met their deductible on a separate traditional policy. Or it could function as excess coverage. Or it could cover exposures excluded by other policies, or for which there is no insurance option at all. Completely bespoke, parametric coverages are a function of each client’s individual exposures, risk tolerance and budget.

“Parametric insurance enables underwriting of risks that are outside tolerance levels from a traditional standpoint,” NPU’s Glassman said.

The non-physical business interruption risks faced by the hospitality industry match that description pretty closely.

“Hotels are a good fit for parametric insurance because they have a guaranteed loss from a business income standpoint when there is a major storm coming,” Glassman said.

While only a handful of carriers currently offer a form of parametric coverage, the abundance of available data and advancement in data collection and analytical tools will likely fuel its popularity.

Companies can maximize the benefits of parametric coverages by building them as supplements to traditional business interruption or event cancellation policies. Both New Paradigm Underwriters and Beazley either work with other property insurers or create hybrid products in-house to combine the best of both worlds and assemble a comprehensive risk transfer solution. &

Katie Siegel is an associate editor at Risk & Insurance®. She can be reached at [email protected]