Beyond Product Oversight & Governance

Why commercial P&C Insurance is entering the era of continuous portfolio governance ?

Product Oversight & Governance (POG) is often presented as just another regulatory requirement: define a target market, monitor products throughout their lifecycle, review them regularly, and demonstrate that they continue to meet customers’ needs. These principles are relevant and necessary. But reducing POG to a mere compliance exercise misses its broader significance.

Regulation does not create a new problem. It brings into focus a reality that the commercial insurance market has been accumulating for years. Insurers are required to make underwriting decisions ever more quickly, while the businesses they insure are evolving at an unprecedented pace. This tension leads to an uncomfortable situation: policies no longer fully reflect the reality of the risks they cover.

Over time, this gap compounds at the portfolio level. This is precisely the phenomenon POG makes impossible to ignore.

What matters is not that it requires insurers to monitor their portfolios more closely. It is that it implicitly acknowledges a reality the industry has struggled to operationalize for years: commercial insurance portfolios are no longer static collections of contracts, but living systems whose risk profiles evolve continuously, in step with the businesses they insure. This changes the very nature of governance.

An Assumption That No Longer Holds

Commercial insurance was long built on a remarkably stable operating model. A risk is assessed, a policy is issued, and until renewal the contract is assumed to remain broadly representative of the insured company’s activity. This assumption shaped far more than underwriting decisions—it shaped our entire approach to governance.

Governance traditionally relied on well-defined rituals: annual renewals to revisit files, portfolio sampling to review subsets of contracts, manual audits to verify compliance file by file, and questionnaires sent to brokers to capture changes on the client side.

We operated this way because, for decades, companies simply did not evolve fast enough to justify a different approach.

Today, that model is increasingly difficult to sustain. Businesses diversify their activities, adopt artificial intelligence, reorganize supply chains, expand internationally, and continuously adapt their business models to shifting markets. Meanwhile, insurance contracts often remain unchanged.

This phenomenon is what we call risk debt, and it threatens insurers’ profitability in a soft market environment.

Silent Drift: How Risk Debt Accumulates

When an insurer assesses underwriting quality, attention naturally focuses on the moment the policy is issued. Was the information complete? Was pricing adequate? Were underwriting rules followed? These questions remain essential.

But they now describe only the beginning of the story.

A contractor starts installing solar panels. A logistics company gradually specializes in transporting hazardous materials. A wholesaler becomes an importer. A manufacturer opens production sites abroad. A food company automates a critical part of its operations.

None of these developments mean the initial underwriting decision was wrong. In most cases, they reflect companies growing and seizing new opportunities. The difficulty lies elsewhere: underwriting captures a moment in time, while the business continues to evolve long after that initial snapshot.

As the business evolves, so does its risk profile. New activities alter liability exposures. Changes in supply chains reshape business interruption risk. Digitalization creates cyber dependencies that barely existed at underwriting. International expansion introduces regulatory complexity absent from the initial assessment. Yesterday’s assumptions gradually become an outdated understanding of reality.

This is what we call Silent Drift.

Silent Drift is not a failure of underwriting or governance. It is what mechanically happens when you insure businesses that never stop moving. The real risk is not that it exists. It is that it progresses below the radar.

Each undetected change slightly increases the gap between the insurer’s perception of risk and the insured company’s reality. Across thousands—or even hundreds of thousands—of contracts, these small discrepancies accumulate into something much larger: a portfolio whose true risk profile no longer fully aligns with the assumptions that justified the original underwriting decisions.

Product Oversight & Governance Changes the Question

Seen from this angle, Product Oversight & Governance takes on a different meaning. Its objective is simple: insurers must define a target market, ensure their products continue to serve that market, and review them whenever significant changes occur.

The regulation itself is relatively straightforward. Its operational implications are far more complex. POG does not require insurers to produce more documentation for its own sake. It requires them to demonstrate that the assumptions underlying their products remain valid over time.

This seemingly modest requirement profoundly transforms governance: it is no longer limited to documenting decisions—it demands continuously verifying that yesterday’s understanding still matches today’s reality.

This is precisely the challenge traditional governance models were never designed to solve.

How can an insurer continuously verify that hundreds of thousands of commercial policies still correspond to the underwriting assumptions on which they were issued?

Historically, the answer relied on periodic controls. These approaches remain useful. They provide rigor, consistency, and accountability. But they belong to a model designed for relatively stable portfolios.

Commercial insurance portfolios no longer function that way. The real challenge is no longer interpreting regulation—it is achieving continuous operational visibility.

Compliance Is Only the Visible Consequence

The discussion often begins with compliance. It rarely ends there.

The same lack of visibility that creates regulatory risk also weakens underwriting discipline—often in subtle ways. Risk appetite becomes harder to apply consistently across a portfolio that shifts every day. Technical margins erode without always knowing why. Renewals rely on assumptions that no longer quite fit the insured business, while capital continues to be allocated to exposures that have already changed in nature.

Conversations with reinsurers grow more complex, as it becomes harder to demonstrate the portfolio’s characteristics with certainty. Meanwhile, experienced underwriters spend an increasing share of their time searching for emerging changes rather than exercising judgment where it creates the most value.

Silent Drift gradually builds what many insurers now recognize as risk debt: the widening gap between what the insurer believes it covers and the risks actually present in its portfolio. From this perspective, compliance is not the core issue. It is merely the most visible symptom.

At its core, this is not a compliance problem. It is a strategic one. Every commercial insurer pursues the same objective: profitable growth supported by disciplined underwriting and consistent technical decisions.

That objective becomes increasingly difficult to achieve when leaders can no longer answer a simple question with confidence: does the portfolio we insure today still resemble the one we intended to underwrite?

From Recording Decisions to Understanding Reality

Over the past two decades, commercial P&C insurers have invested heavily in systems that support their operations. Policy administration systems have become central repositories. CRMs have enhanced client relationships. Underwriter workbenches have streamlined collaboration. Document management solutions have strengthened traceability and compliance. Data platforms have significantly enriched access to internal and external information.

These investments have profoundly transformed the industry. They have brought greater consistency, stronger governance, and significantly improved operational efficiency in increasingly complex organizations. Yet despite their different purposes, they all pursued the same goal: faithfully preserving what was known at the moment an underwriting decision was made.

Commercial insurance now depends on a different question.

What has changed since then?

The real challenge is not workflow, nor even data. It is the intelligence derived from it.

Systems of record remain indispensable. They preserve underwriting decisions, policy information, client data, and operational history. But they were never designed to continuously verify whether the assumptions they contain still describe reality.

What is emerging today is a complementary layer of capability: one that continuously compares the insurer’s understanding of a business with its evolving reality; that transforms scattered information into actionable underwriting intelligence; and that allows underwriters to devote their time to judgment rather than detection.

This does not replace existing systems or underwriters. It provides them with the continuous visibility they need to remain effective throughout the life of the contract.

It is a subtle shift, but a fundamental one. For years, insurers invested in systems capable of recording decisions. The next generation of capabilities will enable them to continuously understand whether those decisions remain valid.

A New Operating Model for Commercial Insurance

Every major stage in the history of commercial P&C insurance has been defined by a decisive capability. Increasingly sophisticated pricing improved technical risk selection. Catastrophe models transformed accumulation management. Digital underwriting dramatically enhanced operational efficiency.

The next transformation may be less visible, but likely more profound: the ability to continuously understand how risks evolve after underwriting decisions have been made.

Product Oversight & Governance has accelerated this reflection; it did not invent it.

The deeper transformation is the gradual shift from periodic portfolio reviews to continuous portfolio governance.

For decades, insurers differentiated themselves through products, distribution networks, and pricing sophistication. Tomorrow, they will also differentiate themselves through something more fundamental: the ability to continuously understand both the flow of new business and the stock of existing contracts as they evolve over time.

The greatest source of uncertainty is rarely the risk that was poorly underwritten. It is the one that quietly changed in nature without anyone noticing.

Perhaps that is the real capability to build for the decade ahead: seeing change as it happens, not only after it has already become costly.

–

Benoît Pastorelli

CEO, Continuity