Aon Risk Maturity Index



Similar documents
Real Estate Practice. Fact-Based Solutions for Real Estate Risk Management. Risk. Reinsurance. Human Resources.

Executive Liability Insurance

Organization transformation in times of change

Property Insurance Market Report United States. Summary and Forecast Q1 14

ENTERPRISE RISK MANAGEMENT BENCHMARK REVIEW: 2013 UPDATE

Aon Risk Solutions Global Risk Consulting Captive & Insurance Management. Cyber risk and the captive market - a match made in the cloud?

INSURANCE. Moody s Analytics Solutions for the Insurance Company

Captive & Insurance Management

Placing a Value on Enterprise Risk Management ADVISORY

Health Care Practice. An Integrated Approach to Meet the Financial and Risk-Related Needs of Health Care Organizations. Aon Risk Solutions

How to Develop Successful Enterprise Risk and Vendor Management Programs

How do you transform risk into high performance? An Overview of Moody s Analytics

Zurich s approach to Enterprise Risk Management. John Scott Chief Risk Officer Zurich Global Corporate

How to protect, inform & grow your business with trade credit insurance

2012 Hospital and Physician Professional Liability

Aon Risk Solutions. Life Sciences Practice. Providing End-to-End Solutions for Life Sciences Companies. Risk. Reinsurance. Human Resources.

Moody s Analytics Solutions for the Asset Manager

2015 Report on the Current State of Enterprise Risk Oversight:

High Yield Bonds A Primer

Deriving Value from ORSA. Board Perspective

Client Engagement and Compensation Guide

Board oversight of risk: Defining risk appetite in plain English

FUNDS TM. G10 Currencies: White Paper. A Monetary Policy Analysis FUNDS. The Authority on Currencies

INSURANCE RATING METHODOLOGY

Rethinking Fixed Income

Rating Methodology for Domestic Life Insurance Companies

COMMERCIAL BANK. Moody s Analytics Solutions for the Commercial Bank

Credit Research & Risk Measurement

Society of Actuaries in Ireland

Attachment 21.1 AON: Insurance Premium Forecast Report September 2014

Research. What Impact Will Ballooning Government Debt Levels Have on Government Bond Yields?

THE ROLE OF FINANCE AND ACCOUNTING IN ENTERPRISE RISK MANAGEMENT

Getting things done How governments can deliver public infrastructure projects on time and within budget

Outsourcing options for your investment program

Portfolio Management for Banks

MARSH REPORT October International Business Resilience Survey 2015

The Allstate Corporation

Adoption of New Policy Asset Mix

Insurance Industry Expertise

eet Business continuity and disaster recovery Enhancing enterprise resiliency for the power and utilities industry Power and Utilities Fact Sheet

FIXED INCOME INVESTORS HAVE OPTIONS TO INCREASE RETURNS, LOWER RISK

Credit Risk Management: Trends and Opportunities

A. M. Best Company & The Rating Process

Opportunities in credit higher quality high-yield bonds

Does the Number of Stocks in a Portfolio Influence Performance?

Central Bank of Ireland Guidelines on Preparing for Solvency II Pre-application for Internal Models

LIQUIDITY RISK MANAGEMENT GUIDELINE

ING Insurance Economic Capital Framework

Scenario Analysis Principles and Practices in the Insurance Industry

The Credit Analysis Process: From In-Depth Company Research to Selecting the Right Instrument

Claims Paying Ability Ratings for General Insurance Companies

Accenture Risk Management. Industry Report. Life Sciences

Condensed Interim Consolidated Financial Statements of. Canada Pension Plan Investment Board

Transforming risk management into a competitive advantage kpmg.com

PRACTICAL APPLICATIONS FOR BUSINESS CONTINUITY MANAGEMENT

Condensed Interim Consolidated Financial Statements of. Canada Pension Plan Investment Board

Risk Profile, Appetite, and Tolerance: Fundamental Concepts in Risk Management and Reinsurance Effectiveness

Impact Investing TAILORED, TRANSPARENT SOLUTIONS

Do Diversified Growth Funds solve the diversification problem?

for Analysing Listed Private Equity Companies

Employee Benefits Panel, October 6, 2015 PROFESSION INNOVATION DIVERSITY

Asia Insurance Co. Ltd.

ECONOMICS & COUNTRY RISK. Solution Overview for Manufacturing Companies

Fiduciary Management. What is Fiduciary Management?

Black Box Trend Following Lifting the Veil

Stochastic Analysis of Long-Term Multiple-Decrement Contracts

Hedging at Your Insurance Company

Deciding what opportunities to fund, which risks to protect

4Q14. Reshaping the Multiemployer Health & Welfare Investment Landscape. November Executive Summary. Introduction

Portfolio Management Consultants Perfecting the Portfolio

University of St. Gallen Law School Law and Economics Research Paper Series. Working Paper No June 2007

Standard & Poor s perspective on Swedish insurance sector risks

Bodily Injury Thematic Review

What we are seeing is sustained growth and increasing interest by corporates in adopting and enhancing a captive strategy.

The advantage of multiple perspectives

Risk Management and Solutions to the Current Financial Crisis

Internal audit value optimization for insurance organizations

Dagong Europe Proposed Criteria for Rating Insurance Companies 31 July 2013

ERM from a Small Insurance Company Perspective

CONSULTATION PAPER Proposed Prudential Risk-based Supervisory Framework for Insurers

Managing Risk/Reward in Fixed Income

ERM Learning Objectives

The Determinants and the Value of Cash Holdings: Evidence. from French firms

Consumer Goods and Services

Management in an Uncertain. David A.J. Axson

Export Development Canada

IIF Training 2015 Course Descriptions

Admission Criteria Minimum GPA of 3.0 in a Bachelor s degree (or equivalent from an overseas institution) in a quantitative discipline.

Understanding Participating Whole. equimax

Aon Risk Solutions Construction Services Group. Subcontractor Prequalification Survey. Risk. Reinsurance. Human Resources.

Effective Techniques for Stress Testing and Scenario Analysis

Fixed Income Liquidity in a Rising Rate Environment

Enterprise Risk Management: From Theory to Practice

seic.com/institutions

Considerations for Financial Advisors Regarding Corporate E&O Insurance Coverage

Cost of capital in the financial turmoil: how should utilities deal with it?

Operational Risk Management - The Next Frontier The Risk Management Association (RMA)

August 3, R. Halsey Wise Chairman and Chief Executive Officer MedAssets, Inc. 100 North Point Center, East, Suite 200 Alpharetta, GA 30022

Private Market Real Estate Investment Options for Defined Contribution

RISK FACTORS AND RISK MANAGEMENT

Transcription:

Aon Risk Solutions Aon Risk Maturity Index Insight Report, October 2014 Risk. Reinsurance. Human Resources.

Table of Contents Executive Summary...1 Accentuating the Upside, Smoothing the Downside...2 The Relationship between Risk Management and Stock Price Performance and Volatility...2 Enhanced Risk Management and Superior Financial Performance...4 Risk Management and Organizational Resiliency...6 Driving Results: Board Roles and Responsibilities, Financial and Risk Management Practices...8 Board Risk Oversight Practices and Improved Risk Management...9 Risk-Based Forecasting and Planning (RBFP) and Organizational Volatility and Enhanced Earnings Forecast Accuracy....10 Crossover between Aon Risk Maturity Index and Aon Global Risk Management Survey Responses...12 Global Average is 3 Defined...13 Reach and Participation is Global...13 Concluding Remarks...15 Authors and Contributors...17

Executive Summary The Aon Risk Maturity Index was designed to enable senior financial and risk leaders to assess, benchmark and track the development of their organizations risk framework and risk processes. Over time, the aggregated data and findings have provided researchers from Aon plc and The Wharton School of the University of Pennsylvania with the ability to provide more complex and sophisticated insights around risk governance and predictive operational risk practices directly linked to the financial performance of an organization. In today s ever-changing environment, the ability to anticipate opportunities and effectively understand and respond to risks is critical to the operational and financial well-being of organizations. This is increasingly important given that internal and external factors influencing organizational risk management practices continue to evolve. Despite bull equity markets across most major stock indices in 2013 and 2014, findings from the Aon Risk Maturity Index have led key advisers from Aon to emphasize the importance of organizational risk management practices in a dynamic economic environment. Changes in geopolitical overtones, monetary policies of central banks and unexpected economic conditions have the ability to quickly reshape the financial landscape. Researchers from Aon and Wharton have uncovered new insights to help organizations better understand their organizational risk approach and framework, as well as risk management practices that will enable them to respond to an inevitable changing risk landscape. The Aon Risk Maturity Index Insight Report, October 2014, has been developed by Aon, in close collaboration with The Wharton School of the University of Pennsylvania, as a means of driving marketplace insights on the relationship between the maturity of organizations risk management practices and factors that drive organizational performance. In this edition of the Aon Risk Maturity Index Insight Report, we present new findings and analysis on the relationship between risk maturity, financial performance and risk governance. 1. We confirm past analysis from the Aon Centre for Innovation and Analytics (ACIA) on the inverse relationship between a higher Risk Maturity Rating and lower stock price volatility and the direct relationship between a higher Risk Maturity Rating and superior operational financial performance as continued evidence on the need for organizations to invest and enhance their risk management practices. 2. We also confirm previous findings that indicate a relationship between higher Risk Maturity Rating and the relative resilience of an organization s stock price in the immediate aftermath of significant risk events to the financial markets. 3. We introduce new findings on the relationship between Board Risk Oversight practices and risk maturity. Researchers find a correlation between increased Board involvement with regards to risk and risk management to stronger organizational risk practices. 4. We highlight ground-breaking findings from Wharton showing a direct relationship between risk-based forecasting and planning (RBFP) to firm volatility and earnings predictability. 5. Lastly, we introduce a cross-over analysis between the Aon Risk Maturity Index and the Aon Global Risk Management Survey, which demonstrates remarkable consistency in which risks are foremost in the minds of an organization s senior risk and financial leaders. Aon Risk Solutions 1

Accentuating the Upside, Smoothing the Downside Prior research from Aon and Wharton observed that a direct correlation between higher risk maturity and improved stock price performance coincided with lower stock price volatility. Working with annual financial results from close to 300 publicly traded companies around the world; our research has found a continued correlation between higher risk maturity and improved operational financial performance, profitability and organizational resiliency. These important findings empirically confirm the importance of a robust, holistic risk management approach in predicting stronger and more consistent financial results over time. The Relationship between Risk Management and Stock Price Performance and Volatility A deviation from recent findings, Aon and Wharton researchers found no significant correlation between risk maturity and superior stock price performance (reference Graph 1 on page 3). Two key factors may help explain this deviation. 1. 2013/2014 Bull Equity Market Environment Overall market sentiment is one of a multitude of factors that affects an organization s stock price. In a bull equity market environment, optimistic market sentiment has more of an equalizing effect on an organization s stock price than in a bear market environment. 2. Have markets already rewarded those organizations with more sophisticated risk management practices? Building on past analysis that illustrated a statistical link between higher risk maturity and superior stock price performance it is possible any previous reward or premium that markets applied to organizations with enhanced risk management frameworks and practices has already been priced in to the organization s stock price, absent new discoveries regarding risk management practices within the organization. 2 Risk Maturity Index

Graph One: Stock Price Performance by Risk Maturity Rating 60 % Perf 12 Perf 13 Perf 14 50 % 40 % During the period June 2013 June 2014, researchers found no observable correlation between risk maturity and stock price performance despite earlier findings from 2011-2013 that indicated a statistical correlation Performance % 30 % 20 % 10 % 0 % -10 % 1 1.5 2 2.5 3 3.5 4 4.5 5-20 % Risk Maturity Score Return on Stock Price: Yearly return as of June All references to Bloomberg as a source relate to market data only. All Risk Maturity data are presented by Aon plc. The continued statistical correlation between higher risk maturity and reduced stock price volatility helps validate the assumption by Aon and Wharton researchers that evidence of sophisticated risk management practices is one of many factors that help smooth out volatility in an organization s stock price. Differing from stock price performance, stock price volatility is a proxy to measure the underlying risk of shifts in an organization s stock price. Our research therefore emphasizes the importance of robust risk management practices even during a strong equity market cycle. Graph 2 highlights the finding on stock price volatility. Aon Risk Solutions 3

Graph Two: Stock Price Volatility by Risk Maturity Rating 60 % Vol11 Vol12 Vol13 Vol 14 50 % 40 % During the period June 2013 June 2014, organizations with the highest Risk Maturity of 5.0 (Advanced) as a group exhibited a stock price volatility 34% lower than the group of organizations with the lowest Risk Maturity Rating of 1.0 (Initial). This is consistent with findings from 2011-2013. Volatility % 30 % 20 % 10 % 0 % 1 1.5 2 2.5 3 3.5 4 4.5 5 Risk Maturity Score Volatility: A measure of the risk of price moves for a security calculated from the standard deviation of the day to day logarithmic historical price changes. The 260-day price volatility equals the annualized standard deviation of the relative price change for the 260 most recent trading days closing price, expressed as a percentage. All references to Bloomberg as a source relate to market data only. All Risk Maturity data are presented by Aon plc. Although organizations that are not publicly listed cannot measure their performance via stock price volatility, the overall finding that risk management supports and stabilizes financial performance is significant for these firms as well, to the extent that they operate under similar performance expectations as publicly-traded companies. Enhanced Risk Management and Superior Financial Performance Financial Performance ratios such as return on assets and return on equity are one of many key determinants of organizational performance. We confirm previous analysis which indicates a statistical link between higher risk maturity and superior return on equity (reference Graph 3). Organizations with the highest Risk Maturity Rating of 5.0 (Advanced) as a group exhibited a 42% return on equity performance while organizations with the lowest Risk Maturity Rating of 1.0 (Initial) as a group exhibited negative return on equity performance of -23%. Expanding on this analysis, researchers from Aon and Wharton have established new findings indicating a statistical link between higher levels of risk maturity and superior Return on Assets (reference Graph 4). This apparent relationship between enhanced risk management practices and superior financial performance is significant as market evaluation of such ratios contributes to an organization s ability to raise capital in the financial markets given these ratios are vital indicators of how effectively an organization allocates investment capital or how efficiently an organization creates value. 4 Risk Maturity Index

Graph Three: Return on Equity by Risk Maturity Rating Return on Equity % 50 % 40 % 30 % 20 % 10 % 1 1.5 2 0 % -10 % ROE 13 ROE 14 2.5 3 3.5 4 4.5 5 During the period March 2013 March 2014, organizations with the highest Risk Maturity Rating of 5.0 (Advanced) as a group exhibited a return on equity performance of +42% while organizations with the lowest Risk Maturity Rating of 1.0 (Initial) as a group exhibited a negative return on equity performance -23%. This is consistent with findings from the March 2012-March 2013 period. -20 % -30 % Risk Maturity Score Return on Equity: Yearly return as of March All references to Bloomberg as a source relate to market data only. All Risk Maturity data are presented by Aon plc. Graph Four: Return on Assets by Risk Maturity Rating Return on Assets % 50 % 40 % 30 % 20 % 10 % 0 % 1 1.5 2-10 % ROA 13 ROA 14 2.5 3 3.5 4 4.5 5 During the period March 2013 March 2014, organizations with the highest Risk Maturity Rating of 5.0 (Advanced) as a group exhibited a return on assets performance of +11% while organizations with the lowest Risk Maturity Rating of 1.0 (Initial) as a group exhibited a negative return on assets performance -10%. This is consistent with findings from the March 2012- March 2013 period. -20 % -30 % Risk Maturity Score Return on Assets: Yearly return as of March All references to Bloomberg as a source relate to market data only. All Risk Maturity data are presented by Aon plc. Aon Risk Solutions 5

Risk Management and Organizational Resiliency Looking at the relationship between higher levels of Risk Maturity and organization resilience, researchers from Aon subjected the data to a new series of stress tests based on the Bloomberg Scenario Function to determine the effect of significant risk events on the sample set of securities. These scenarios simulate how securities would respond to a list of historical shocks if the same factors were to arise today. Our research confirms earlier findings that indicate a direct relationship between Risk Maturity and organizational resiliency as judged by the relative resilience of an organization s stock price in immediate aftermath to significant risk events such as the 2008 Lehman Brothers default, the 2010 Greek Fiscal Crisis and the 2011 Japanese Earthquake. Graphs 5, 6, and 7 present these confirmed organizational resiliency findings. Graph Five: Lehman Default % Impact on Stock Price 0 % 1 1.5 2-5 % -10 % -15 % -20 % -25 % 2.5 3 3.5 4 4.5 5 Model All Model Factors are implicitly shocked based on historical factor returns from 9/15/2008 to 10/14/2008 Findings Organizations with the highest Risk Maturity Rating of 5.0 (Advanced) as a group exhibited a stock price performance of -18%. This represents a +36% enhanced stock price performance compared to organizations with the lowest Risk Maturity Rating of 1.0 (Initial) that as a group exhibited a negative stock price performance of -28% -30 % Risk Maturity Score Source: Bloomberg Returns on stock price over the month immediately following default of Lehman Brothers in 2008 Graph Six: Greek Crisis % Impact on Stock Price 0% 1 1.5 2-5% -10% -15% -20% -25% 2.5 3 3.5 4 4.5 5 Risk Maturity Score Source: Bloomberg Greece was one of the fastest growing economies in the euro zone from 2000 2007. The cost of financing this growth however resulted in alarming high government deficits and debt levels relative to GDP. On April 27th 2010 the Greek debt rating was downgraded from BBB+ to BB+. Returns on stock price over the period immediately following the 2010 Greek Fiscal Crisis. Model All Model Factors are implicitly shocked based on historical factor returns from 4/26/2010 to 6/8/2010 Findings Organizations with the highest Risk Maturity Rating of 5.0 (Advanced) as a group exhibited a stock price performance of -10%. This represents a +54% enhanced stock price performance compared to organizations with the lowest Risk Maturity Rating of 1.0 (Initial) that as a group exhibited a negative stock price performance of -22% 6 Risk Maturity Index

Graph Seven: Japanese Earthquake 0% 1 1.5 2-0.5% 2.5 3 3.5 4 4.5 5 Model All Model Factors are implicitly shocked based on historical factor returns from 3/10/2011 to 3/15/2011 % Impact on Stock Price -1.0% -1.5% -2.0% -2.5% -3.0% -3.5% Findings Organizations with the highest Risk Maturity Rating of 5.0 (Advanced) as a group exhibited a stock price performance of -0.3%. This represents a +90% enhanced stock price performance compared to organizations with the lowest Risk Maturity Rating of 1.0 (Initial) that as a group exhibited a negative stock price performance of -3.1% -4.0% Source: Bloomberg Risk Maturity Score On March 11th a 9.0 magnitude earthquake occurred off the coast of Japan which also triggered a major tsunami, catastrophic loss of life and a meltdown at the Fukushima Daiichi Nuclear Power Plant. Returns on stock price over the period immediately following the 2012 Japanese Earthquake. New for 2014, as a proxy for the recent 2014 Russian/Ukraine crisis, our researchers looked back and subjected the data to stress test for the 2008 Russian/Georgia Crisis event. The analysis once again confirmed a direct relationship between Risk Maturity and organizational resiliency as judged by the relative resilience of an organization s stock price in immediate aftermath of this event. Graph 8 below presents these findings. Graph Eight: 2008 Russian/Georgia Crisis % Impact on Stock Price 0.00 1 1.5 2 2.5 3 3.5 4 4.5 5-5.0% -10% -15% -20% -25% -30% -35% -40% Risk Maturity Score Source: All references to Bloomberg as a source relate to market data only. All Risk Maturity data are presented by Aon plc. War with Georgia and rapidly declining oil prices raise fears of an economic recessiotn within the region. Model All Model Factors are implicitly shocked based on historical factor returns from 8/7/2008 to 10/06/2008 Findings Organizations with the highest Risk Maturity Rating of 5.0 (Advanced) as a group exhibited a stock price performance of -16%. This represents a +53% enhanced stock price performance compared to organizations with the lowest Risk Maturity Rating of 1.0 (Initial) that as a group exhibited a negative stock price performance of -34% This research supports the conclusion that risk management policies are most beneficial when facing an actual or expected threat; in this case, that strong risk management contributes to higher returns even during significant market events. Aon Risk Solutions 7

Wharton analyzed responses from close to 700 organizations from around the world. Finding the overall sophistication of board oversight practices has a significant positive impact on the organization s risk maturity. 8 Risk Maturity Index

Driving Results: Board Roles and Responsibilities, Financial and Risk Management Practices What level of board involvement, financial analysis methods and risk management practices contribute to advanced risk maturity and more stable financial performance? What makes a robust organizational risk management framework? Confirming the link between strong risk management practices and superior financial performance highlights the need for a better understanding of practical measures that an organization can take to effectively implement and support a sustainable risk management framework. Analyzing responses from the Aon Risk Maturity Index, researchers from Aon and Wharton have identified statistically relevant high-value practices related to governance, decision making and risk management to help organizations focus their resources more strategically as they develop that framework. Board Risk Oversight Practices and Improved Risk Management A variety of external events, including numerous inquiries into the causes of the financial crisis, changes in regulations and listing requirements, more stringent interpretations of directors fiduciary responsibilities and the issuance of best practice governance standards by investors, rating agencies and shareholder advisory groups, have fostered rising expectations for Boards of Directors to exert greater oversight of organizational risk management practices. Utilizing responses from close to 700 distinct public, private and non-profit organizations from around the world, researchers from Wharton took a close look inside the black box of board risk oversight and assessed the association between ownership structure and legal origin to the sophistication of board oversight practices. Researchers found that the assignment of board roles and responsibilities are a major determinant of board risk oversight practices. When the assignment of risk responsibilities is delegated to the board as a whole rather than solely to committees and when directors risk management roles and responsibilities are included in their performance evaluations, the board tends to have more consistent understanding of the organizations top risks, existing risk management activities, quantified risk appetite and emerging risk profile, more extensive and frequent risk reporting, and greater consensus and communication between the board and the management team regarding risk management strategies. Ownership structure (public, private, non-profit) and country-level governance variables (code vs. common law legal origin and creditor and shareholder protections) are significantly associated with the assignment of board roles and responsibilities but have very little effect on specific board risk management practices. When researchers examined the effects of board practices and risk governance on an organization s overall risk maturity, they found that the overall sophistication of board oversight practices has a significant positive impact on the organization s risk maturity, but solely the assignment of board roles and responsibilities does not. These results suggest that any impact of board responsibility or performance evaluation on organizational risk management practices occurs on the use of more sophisticated board risk practices. Advisers from Aon have long emphasized the importance of board risk oversight practices given a board s mandate and ability to drive top-down organizational initiatives. From these research findings, it can be gleaned that the board should not only take an interest in risk management but also assign itself specific risk responsibilities and oversee risk management practices in order to drive and ingrain proper risk management practices into an organization s culture. Aon Risk Solutions 9

Risk-Based Forecasting and Planning (RBFP) and Organizational Volatility and Enhanced Earnings Forecast Accuracy An organization s earnings forecast plays an important role in budgeting and cash management, capital justification, strategic planning as well as providing the foundation for investor communications. However, increasingly volatile environments have made it increasingly difficult for organizations to forecast earnings. Risk-based forecasting and planning (RBFP) provides one potential mechanism for organizations to improve the incorporation of risk considerations into integrated forecasting and planning. Researchers from Wharton examined the extent to which risk-based forecasting and planning practices were associated with organizational volatility and earnings forecasts from close to 50 publicly-traded companies in the United States that disclose quarterly earnings forecasts. An RBFP score was formed for each organization based on their unique RMI responses regarding the extent to which formal, quantitative risk assessments and evaluations are conducted; the identification of risk drivers and risk interdependencies and the integration of this information into decision-making; and the incorporation of risk considerations in budgeting, project and capital investment decisions and strategy development. Researchers found a strong correlation between sophisticated risk-based forecasting and planning practices and firm volatility as reflected in cash flows, earnings, sales and stock price. Lower firm volatility, in turn, is associated with greater management forecast accuracy and smaller forecast ranges. Researchers also found that more sophisticated RBFP practices have a direct association with more accurate earnings forecasts and smaller forecast ranges, even after controlling for volatility. These associations suggest that RBFP improves forecasting ability not only by facilitating the reduction of volatility in the organization s operations but also by improving the information used in the process itself. Risk management literature further suggests that the informational role of risk-based forecasting and planning is likely to be most important in firms where volatility is greatest. Consistent with these claims, researchers at Wharton found the association between RBFP and forecasting performance to be strongest in settings where the organization faces the greatest firm volatility. Graphs 9, 10, and 11 highlight the groundbreaking findings on risk-based forecasting and planning. Graph Nine: Estimated Change in Volatility Ranking 3 % 2 % 1 % 0 % Low RBFP Median RBFP High RBFP Analyzing quarterly earnings forecasts from close to 50 publicly-traded companies in the United States, researchers find that organizations with strong RBFP practices exhibit a 2.5% reduction in firm volatility while organizations with weak RBFP practices exhibit a 2.9% increase in firm volatility -1 % -2 % -3 % Analysis is based on work by Christopher Ittner and Jeremy Michaels of The Wharton School Firm volatility as reflected in cash flows, earnings, sales and stock price 10 Risk Maturity Index

Graph Ten: Estimated Percentage Difference From Average Earnings Forecast Low RBFP Median RBFP High RBFP 50 % Forecast Error Forecast Bias Forecast Width 30 % 10 % -10 % -30 % Analyzing quarterly earnings forecasts from close to 50 publicly-traded companies in the United States, researchers find that organizations with strong RBFP practices exhibit a 20% reduction in forecast error, 47.7% reduction in forecast bias and a 14.3% reduction in forecast width while organizations with weak RBFP practices exhibit a 17.5% increase in forecast error, 41.5% increase in forecast bias and 12.5% increase in forecast width -50 % Analysis is based on work by Christopher Ittner and Jeremy Michaels of The Wharton School Forecast Error: absolute value of actual earnings per share less management s forecast, as a percentage of price at the beginning of the quarter Forecast Bias: similarly defined as error, except we do not take the absolute value of the forecast error Forecast Width: the upper bound of the forecast range minus the lower bound, as a percentage of beginning of period price Graph 11: Estimated Percentage Difference from Average Earnings Forecast Error Low Volatility High Volatility 50 % Low RBFP Median RBFP High RBFP 30 % 10 % -10 % Analyzing quarterly earnings forecasts from close to 50 publicly-traded companies in the United States, researchers find that for organizations with high firm volatility, weak RBFP practices increase average earnings forecast error by 36.1% while strong RBFP reduce average earnings forecast error by 41.2% in organizations with high firm volatility. -30 % -50 % Analysis is based on work by Christopher Ittner and Jeremy Michaels of The Wharton School Firm volatility as reflected in cash flows, earnings, sales and stock price Aon Risk Solutions 11

Crossover between Aon Risk Maturity Index and Aon Global Risk Management Survey Responses Along with insights from the Aon Risk Maturity Index, Aon also releases biannual findings from its Global Risk Management Survey (GRMS). Leveraging data from seventy (70) risk or financial leaders who participated in both surveys, researchers at the Aon Centre for Innovation & Analytics (ACIA) have examined and identified differences in risk priorities between organizations with below average risk maturity and organizations with above average risk maturity. Top Five Risks Identified by Below Average RMI Scores 1 Damage to Reputation/Brand 2 Regulatory/ Legislative Changes 3 Failure to Attract/ Retain Top Talent 5 4Business Political Risks/ Interruption Uncertainties Top Five Risks Identified by Above Average RMI Scores 1 Economic Regulatory/ Slowdown 2 Legislative Changes 5 3 4 Reputation/Brand Retain Top Talent Damage to Business Interruption Failure to Attract/ With one exception for each sample set, the crosssectional responses demonstrate a remarkable consistency in which risks are foremost in the minds of an organization s senior risk and financial leaders. As discussed at the beginning of this report, in today s ever-changing environment, an organization s ability to anticipate opportunities and effectively understand and respond to risks is critical. While organizations appear to identify similar opportunities and risks, this research from Aon suggests that an organization s level of planning, preparedness and response to these risks in distinctly different. The latest findings in this report regarding risk maturity and firm volatility, financial performance, organizational resilience, board practices and enhanced earnings forecast accuracy further reinforce the inference that organizations with above average risk maturity are better situated for significant changes in the economic landscape. 12 Risk Maturity Index

Global Average is 3 Defined Aon Risk Maturity Index: Distribution of Risk Maturity Ratings (September 2014) 25% 20% 22.0% 20.1% 15% 14.1% 15.0% 11.2% 10% 9.3% 5% 3.4% 4.3% 0% 1 1.5 2 2.5 3 3.5 4 4.5 5 0.6% Initial Initial to Basic Basic Basic to Defined Defined Defined to Operational Operational Operational to Advanced Advanced Reach & Participation is Global More than ten participants Less than ten 25+ 5 10 Industries Continents Languages Aon Risk Solutions 13

The Ten Characteristics of Risk Maturity The Aon Risk Maturity Index examines specific practices and structures related to ten characteristics of Risk Maturity. These ten characteristics are further broken down into 40 specific components that are scored on a 1 (Basic) to 5 (Advanced) scale similar to the overall Index. 1 Board-level understanding of and commitment to risk management as a critical factor for decision making and for driving value 12 A senior-level executive who drives and facilitates key risk management processes and development 13 Transparency of risk communication 14 A risk culture that encourages full engagement and accountability at all levels of the organization 15 Identification of existing and emerging risks using internal and external data and information 16 Participation of key stakeholders in risk management strategy development and policy setting 17 Formal collection and incorporation of operational and financial risk information into decision making and governance processes 18 Integration of risk management insights into human capital processes to drive sustainable business performance 19 Use of sophisticated quantification methods to understand risk and demonstrate added value through risk management 10 1 A move from focusing on risk avoidance and mitigation to leveraging risk and risk management options that extract value 14 Risk Maturity Index

Concluding Remarks The growth and evolution of the Aon Risk Maturity Index has enabled the tool to become an industry-leading, global database on risk management practices. Results from the Index have yielded valuable findings around the correlation of advanced risk management practices and financial performance, as well as practical insights to assist in the development of a mature risk management framework in support of sustainable, stable financial results. Aon will continue its research with The Wharton School to identify key risk management practices and processes that contribute to improved financial performance as well as a deeper understanding of industry-specific best practices in risk management. 1 1.5 3 2 2.5 3.5 4 4.5 5 The Aon Risk Maturity Index is a free, confidential and online tool. For more information or to participate, please visit aon.com/rmi or email risk.maturity.index@aon.com. Aon Risk Solutions 15

16 Risk Maturity Index

Authors and Contributors Theresa W. Bourdon, FCAS Group Managing Director Aon Global Risk Consulting theresa.bourdon@aon.com Kieran Stack Managing Director Aon Global Risk Consulting kieran.stack@aon.com Christopher Ittner EY Professor of Accounting The Wharton School, University of Pennsylvania ittner@wharton.upenn.edu Jenna Cavanaugh Enterprise Risk Management Consultant Aon Global Risk Consulting jenna.cavanaugh@aon.com Johnny Galway Research Analyst Aon Centre for Innovation & Analytics johnny.galway@aon.ie Rudolph Koenig AGRC Marketing Lead US Aon Global Risk Consulting rudolph.koenig@aon.com William Zhang Enterprise Risk Management Analyst Aon Global Risk Consulting william.zhang@aon.com About Aon Global Risk Consulting In today s challenging global environment, business risks are no longer isolated by industry, geography or country. Economic slowdown, regulatory changes, cyber crime, terrorism, increased competition, damage to reputation, and other critical risks are complex, inter-related and global in consequence. Aon Global Risk Consulting is the world s leading risk consulting organization. With nearly 1,800 risk professionals in 50 countries worldwide, AGRC consultants have the expertise and experience to recognize and address the unique challenges and opportunities that face our clients. In close partnership with Aon s broking team, AGRC provides comprehensive and tailored solutions through a consistent global approach backed by a panel of industry experts. Our risk control, claims and engineering team consists of 600 professionals who support clients globally in the property and casualty risk control arena. Our Risk Consulting business unit includes leading disciplines that include actuarial, business continuity management (BCM), enterprise risk management (ERM), risk management outsource and risk feasibility. Our Actuarial & Analytics (A&A) practice consists of more than 100 consultants including 47 actuaries having Property & Casualty (P&C) credentials. Aon s Captive & Insurance Management practice is widely recognized as the leading captive manager, managing nearly 1,200 captives globally with local capabilities in over 30 countries.

About Aon Aon plc (NYSE:AON) is the leading global provider of risk management, insurance and reinsurance brokerage, and human resources solutions and outsourcing services. Through its more than 66,000 colleagues worldwide, Aon unites to empower results for clients in over 120 countries via innovative and effective risk and people solutions and through industry-leading global resources and technical expertise. Aon has been named repeatedly as the world s best broker, best insurance intermediary, best reinsurance intermediary, best captives manager, and best employee benefits consulting firm by multiple industry sources. Visit aon.com for more information on Aon and aon.com/ manchesterunited to learn about Aon s global partnership with Manchester United. Aon plc 2014. All rights reserved. The information contained herein and the statements expressed are of a general nature and are not intended to address the circumstances of any particular individual or entity. Although we endeavor to provide accurate and timely information and use sources we consider reliable, there can be no guarantee that such information is accurate as of the date it is received or that it will continue to be accurate in the future. No one should act on such information without appropriate professional advice after a thorough examination of the particular situation. Risk. Reinsurance. Human Resources.