International (IAIS members; assessed by the IMF and World Bank under the FSAP)

IAIS Insurance Core Principles (ICPs)

280 controls. 235 other frameworks in our corpus share controls with it. Here is all of it, and how much of it you are already doing.

Page built . This page is derived from the framework corpus, which changes when the corpus is extended rather than daily.

280 controls 235 frameworks share controls with it International (IAIS members; assessed by the IMF and World Bank under the FSAP) verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

IAIS Insurance Core Principles Evidence & Implementation Kit

280 controls is the documentation set somebody has to write. This is that set, already written: an adopt-ready artifact for every control in policy and procedure text you edit rather than draft, and the evidence checklist an auditor asks for against each.

See what is in it, $249

The same set every buyer of this kit receives. Nothing here is produced on request.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

Every control

CodeControlAlso in
ICP-1Objectives, Powers and Responsibilities of the Supervisor138
ICP-10Preventive Measures, Corrective Measures and Sanctions11
ICP-12Exit from the Market and Resolution0
ICP-13Reinsurance and Other Forms of Risk Transfer4
ICP-14Valuation0
ICP-15Investment4
ICP-16Enterprise Risk Management for Solvency Purposes80
ICP-17Capital Adequacy0
ICP-18Intermediaries0
ICP-19Conduct of Business0
ICP-2Supervisor0
ICP-20Public Disclosure13
ICP-21Countering Fraud in Insurance0
ICP-22Anti-Money Laundering and Combating the Financing of Terrorism0
ICP-23Group-wide Supervision0
ICP-24Macroprudential Surveillance and Insurance Supervision41
ICP-25Supervisory Cooperation and Coordination51
ICP-3Information Sharing and Confidentiality Requirements0
ICP-4Licensing0
ICP-5Suitability of Persons0
ICP-6Changes in Control and Portfolio Transfers0
ICP-7Corporate Governance0
ICP-8Risk Management and Internal Controls79
ICP-9Supervisory Review and Reporting0
ICP1Objectives, Powers and Responsibilities of the Supervisor0
ICP10Preventive Measures, Corrective Measures and Sanctions0
ICP12Exit from the Market and Resolution0
ICP13Reinsurance and Other Forms of Risk Transfer0
ICP14Valuation0
ICP15Investments0
ICP16Enterprise Risk Management and ORSA0
ICP17Capital Adequacy0
ICP18Intermediaries0
ICP19Conduct of Business0
ICP2Supervisor Independence and Resources0
ICP20Public Disclosure0
ICP21Countering Fraud in Insurance0
ICP22Anti Money Laundering and Combating the Financing of Terrorism0
ICP23Group Wide Supervision0
ICP24Macroprudential Supervision0
ICP3Information Exchange and Confidentiality0
ICP4Licensing0
ICP5Suitability of Persons0
ICP6Changes in Control and Portfolio Transfers0
ICP7Corporate Governance0
ICP8Risk Management and Internal Controls0
ICP9Supervisory Review and Reporting0
1.11.1 Primary legislation names the authority responsible for insurance supervision0
1.21.2 Primary legislation sets the objectives of supervision: policyholder protection, a fair, safe and stable market, financial stability0
1.31.3 Primary legislation gives the supervisor adequate powers0
1.41.4 The supervisor seeks legislative change when its powers fall short0
10.110.1 Action against unlicensed insurance activity0
10.210.2 Preventive measures where an insurer looks likely to breach requirements0
10.310.3 Corrective measures where an insurer fails to comply0
10.410.4 Required actions, periodic checks that they are taken, and assessment of their effect0
10.510.5 Escalation and enforcement where concerns remain unaddressed0
10.610.6 Proportionate sanctions on insurers and individuals0
12.112.1 A legislated framework for voluntary exit that protects policyholders0
12.1012.10 High legal priority for policyholders' claims in liquidation0
12.1112.11 Resolution powers respect the claims hierarchy and no creditor worse off than in liquidation; departures from equal treatment substantiated0
12.1212.12 Legislation states whether insurance liabilities may be restructured and whether policyholders may absorb losses0
12.1312.13 Mechanisms to resolve the head of a domestic insurance group0
12.1412.14 Authority to resolve a foreign insurer's branch, coordinated with the home authorities0
12.212.2 A legislated resolution framework that protects policyholders and absorbs losses in the claims hierarchy0
12.312.3 Processes and procedures to prepare for and conduct resolution0
12.412.4 Regular assessment of which insurers need a resolution plan; plans and resolvability assessments for systemic or critical insurers0
12.512.5 Clearly defined roles of the authorities involved in exit and resolution0
12.612.6 Information sharing, cooperation and coordination with other authorities on exit and resolution0
12.712.7 Legislated criteria for initiating resolution0
12.812.8 A range of resolution powers proportionate to the sector, exercised flexibly and under safeguards0
12.912.9 Supervisor involvement in initiating liquidation0
13.113.1 A reinsurance programme appropriate to the business and integrated with risk and capital management0
13.213.2 Internal controls over implementing the reinsurance programme0
13.313.3 Demonstrating the economic impact of the risk transfer0
13.413.4 Cross-border reinsurance: account taken of the reinsurer's home supervision0
13.513.5 The reinsurance programme considered in liquidity management0
13.613.6 Capital-market risk transfer understood, assessed and its issues addressed0
14.114.1 Valuation covers recognition, derecognition and measurement0
14.1014.10 Appropriate allowance for embedded options and guarantees0
14.214.2 Assets and liabilities valued on consistent bases0
14.314.3 Reliable, decision-useful and transparent valuation0
14.414.4 Economic valuation at risk-adjusted present value of cash flows0
14.514.5 No credit for the insurer's own credit standing in liabilities0
14.614.6 The current estimate: present value of all relevant projected cash flows on unbiased current assumptions0
14.714.7 Technical provisions equal the current estimate plus a margin over current estimate0
14.814.8 The MOCE reflects the uncertainty in the current estimate0
14.914.9 Time value of money with supervisor-set criteria for discount rates0
15.115.1 Regulatory investment requirements on the insurer's investment activities0
15.215.2 Portfolio as a whole: secure assets in the right location, payments met as due, adequate diversification0
15.315.3 Investment appropriate to the nature and duration of the liabilities0
15.415.4 Invest only where the risks can be properly assessed and managed0
15.515.5 Quantitative and qualitative limits on complex, less transparent or less regulated assets and markets0
16.116.1 ERM identifies all reasonably foreseeable material risks and their interdependencies0
16.1016.10 A regular own risk and solvency assessment (ORSA)0
16.1116.11 Board and Senior Management responsible for the ORSA0
16.1216.12 ORSA scope: all material risks, the link between risk and financial resources, and where necessary macroeconomic and counterparty stress0
16.1316.13 ORSA determines needed financial resources; risk actions consider economic and regulatory capital; capital quality and adequacy assessed0
16.1416.14 Continuity analysis over a longer horizon with projections of future financial position and capital compliance0
16.1516.15 Recovery planning: options evaluated in advance; regular assessment of who needs a plan; plans for systemic or critical insurers kept current0
16.1616.16 Supervisory review of the ERM framework and ORSA, with strengthening required where necessary0
16.216.2 Quantification under a wide range of techniques and, as necessary, total-balance-sheet stress testing0
16.316.3 ERM links risk appetite, risk limits, regulatory capital, economic capital and risk monitoring0
16.416.4 A risk appetite statement covering aggregate risk, all material risk categories and operationalised through risk limits0
16.516.5 An explicit asset-liability management policy0
16.616.6 An explicit investment policy: risk within appetite and limits, compliance with investment rules, procedures for complex assets, counterparty appetite0
16.716.7 An underwriting policy: risk within appetite, nature of risks including macroeconomic links, interaction with reinsurance and pricing0
16.816.8 Liquidity risk addressed with strategies to meet liabilities in normal and stressed conditions0
16.916.9 As necessary: liquidity stress testing, a portfolio of unencumbered liquid assets, a contingency funding plan and a liquidity report to the supervisor0
17.117.1 A total balance sheet approach to solvency assessment0
17.1017.10 An approach to identifying and valuing capital resources consistent with the total balance sheet0
17.1117.11 Capital quality criteria based on loss absorbency on going concern, solvent run-off and liquidation or resolution bases0
17.1217.12 Internal models: modelling criteria for broad consistency and the control levels they may be used for0
17.1317.13 Prior approval of an internal model: appropriateness shown, statistical quality, calibration and use tests passed, documentation met0
17.1417.14 Statistical quality test: techniques fit the risks, methodology, inputs and assumptions justified, overall risk position covered, data accurate and complete0
17.1517.15 Calibration test against the modelling criteria0
17.1617.16 Model governance and the use test: Board and management control, understanding and embedding in risk strategy and operations0
17.1717.17 Documentation of the model's design, construction, governance and validation0
17.1817.18 Ongoing monitoring, validation, notification of material changes and regular reporting on the model0
17.217.2 Capital requirements set so obligations are met in adversity, and capital resources maintained to meet them0
17.317.3 Solvency control levels that trigger graded, timely supervisory measures0
17.417.4 At least two control levels: the Prescribed Capital Requirement and the Minimum Capital Requirement0
17.517.5 Group-wide solvency control levels fitted to the group capital approach0
17.617.6 Standardised approaches, with tailored approaches and internal models allowed on approval0
17.717.7 All material risks addressed in valuation and/or capital, with the split made clear and aggregation defined0
17.817.8 Target criteria calibrating the standardised approach, and tailored approaches no less prudent0
17.917.9 Variations to capital requirements only in limited circumstances0
18.118.1 Intermediaries must be licensed0
18.218.2 Ongoing supervisory review of licensed intermediaries0
18.318.3 Professional knowledge, experience, integrity and competence0
18.418.4 Appropriate governance in intermediaries0
18.518.5 Disclosure of terms of business, insurer relationships and remuneration where a conflict may exist0
18.618.6 Safeguards over client monies0
18.718.7 Supervisory measures against licensed intermediaries where appropriate0
18.818.8 Checking that measures are taken and escalating where concerns persist0
18.918.9 Action against unlicensed intermediation0
19.119.1 Due skill, care and diligence with customers0
19.1019.10 Claims handled in a timely, fair and transparent manner0
19.1119.11 Complaints handled in a timely and fair manner0
19.1219.12 Policies and processes for protecting and using customer information0
19.1319.13 Public disclosure by the supervisor that supports fair treatment0
19.219.2 Fair treatment of customers as policy, process and culture0
19.319.3 Conflicts of interest avoided or properly managed0
19.419.4 Arrangements between insurers and intermediaries that secure fair treatment0
19.519.5 Interests of different consumer types considered in product development and distribution0
19.619.6 Promotion that is clear, fair and not misleading0
19.719.7 Timely, clear and adequate pre-contractual and contractual information0
19.819.8 Advice that takes account of the customer's disclosed circumstances0
19.919.9 Policy servicing to the end of all obligations, with disclosure of contractual changes and product-relevant information0
2.12.1 Operational independence from government and industry0
2.102.10 Sufficient human, technological and financial resources0
2.112.11 Outsourced supervisory work: expectations set, performance monitored, independence and confidentiality assured0
2.22.2 Legal protection for the supervisor and its staff acting in good faith0
2.32.3 Transparent appointment and dismissal of the supervisor's head and governing body0
2.42.4 Internal governance that preserves integrity and enables accountability0
2.52.5 Consistent and equitable application of requirements0
2.62.6 Appeal processes that do not impede timely intervention0
2.72.7 Statutory duty to protect confidential information0
2.82.8 Transparency about how the supervisor exercises its responsibilities0
2.92.9 Publication of requirements and public consultation on significant changes0
20.120.1 Audited financial statements available at least annually0
20.1020.10 Capital adequacy: objectives, policies and processes, the solvency requirements applying, capital available, and internal model information0
20.1120.11 Liquidity risk disclosures sufficient for market participants to assess material exposures0
20.1220.12 Financial performance in total and by segment: earnings, claims development, pricing adequacy, investment performance0
20.1320.13 Specified practices for any non-GAAP financial measures disclosed0
20.220.2 Annual public disclosure across ten areas from company profile to financial performance0
20.320.3 Company profile: nature of business, structure, segments, environment, objectives and strategies0
20.420.4 Governance disclosures: key features of the framework, internal controls and risk management, and how they are implemented0
20.520.5 Technical provisions by segment: cash flow assumptions, discount rate rationale, risk adjustment method, description of the method0
20.620.6 Insurance risk exposure: nature of risks, objectives and policies, models and underwriting, reinsurance, concentrations0
20.720.7 Financial instruments and investments by class, with objectives, policies, values, assumptions and differences between reporting bases0
20.820.8 Material investment risk exposures and their management0
20.920.9 Asset-liability management: in total and by segment, methodology and assumptions, capital or provisions held for mismatch0
21.121.1 Legislation sanctions insurance fraud and prejudicing a fraud investigation0
21.221.2 Understanding of fraud risk types, regular sector assessment and required countermeasures0
21.321.3 A supervisory framework to monitor and enforce anti-fraud compliance0
21.421.4 Regular review of the effectiveness of anti-fraud measures, with action to improve them0
21.521.5 Cooperation and information exchange with law enforcement and other supervisors on fraud0
22.122.1 Understanding of ML/TF risks, regular sector risk assessment and a risk-based approach consistent with FATF0
22.222.2 Enforceable AML/CFT means beyond primary legislation, guidance, and feedback to the sector0
22.322.3 A framework to monitor and enforce AML/CFT compliance0
22.422.4 Regular review of the effectiveness of AML/CFT measures, with action to improve them0
22.522.5 Domestic and cross-border cooperation and information exchange for AML/CFT0
22.622.6 Where another authority is designated: awareness of ML/TF risks and liaison with that authority0
22.722.7 Where another authority is designated: cooperation and information exchange for AML/CFT purposes0
23.123.1 Identification of every legal entity in the insurance group0
23.223.2 Determination of the scope of group-wide supervision0
23.323.3 No narrowing of the group or the scope for want of legal authority over particular entities0
24.124.1 Data collected for macroprudential supervision0
24.224.2 Quantitative and qualitative analysis of markets and the sector, covering trends, the current environment and inward and outward risks0
24.324.3 An established process to assess systemic importance of insurers and the sector0
24.424.4 Macroprudential results and systemic importance feed supervisory requirements0
24.524.5 Publication of sector data and statistics0
25.125.1 Agreement among involved supervisors on who is the group-wide supervisor0
25.225.2 The group-wide supervisor understands the group and leads group-wide supervision0
25.325.3 An other involved supervisor understands the group's local entities and their effect on the rest of the group0
25.425.4 Coordination arrangements agreed for cross-border groups0
25.525.5 A written coordination agreement, put in place0
25.625.6 Agreement on whether to establish a supervisory college and how it operates0
25.725.7 Crisis management preparations coordinated across supervisors and authorities0
25.825.8 In a crisis: prompt notification, joint assessment, and coordinated timely solutions0
25.925.9 Coordinated public and group communication during a crisis0
3.13.1 Requesting information, including non-public information, from other supervisors and authorities0
3.23.2 Sharing information at the supervisor's discretion under safeguards0
3.33.3 A legitimate interest and valid supervisory purpose behind every request0
3.43.4 Case-by-case assessment and timely, comprehensive responses to requests0
3.53.5 Use only for the stated purpose; agreement before any other use or onward passing0
3.63.6 Notification and resistance when compelled to disclose received information0
4.14.1 Legislation defines insurance activities, prohibits unauthorised activity, sets legal forms, allocates licensing and provides for foreign insurers0
4.24.2 Licensing as the control over who may conduct insurance0
4.34.3 Clear, objective, public and consistently applied licensing requirements: plans, structure, suitability, governance, capital0
4.44.4 Decisions within a clearly specified reasonable time0
4.54.5 Refusal where requirements are unmet, conditions where appropriate, and reasons given0
4.64.6 A licence states its scope0
4.74.7 A published list of licensed insurers and licence scopes0
4.84.8 Consultation with the relevant supervisor on foreign branches and subsidiaries0
4.94.9 Host consults home before allowing cross-border activity without physical presence0
5.15.1 Legislation names who must meet suitability requirements0
5.25.2 Competence and integrity for Board, management and control functions; financial soundness and integrity for owners0
5.35.3 The insurer demonstrates suitability initially and on an ongoing basis, scaled to the role0
5.45.4 Notification of changes in key persons and of circumstances affecting suitability0
5.55.5 Rectifying action when a person no longer meets suitability requirements0
5.65.6 Information exchange with other authorities to check suitability0
6.16.1 Legislation defines control and provides oversight and enforcement of change-of-control requirements0
6.26.2 Notification of a proposed change of control; supervisory assessment and decision0
6.36.3 Supervisory approval for demutualisation or mutualisation0
6.46.4 Portfolio transfers assessed on the financial condition of both parties and the protection of both sets of policyholders0
7.17.1 Clear allocation of roles between Board, Senior Management and control functions; Board oversight of management0
7.107.10 Senior Management runs operations within the culture and strategy, promotes risk management, compliance and fair treatment, informs the Board and keeps orderly records0
7.117.11 The insurer demonstrates the adequacy and effectiveness of its governance framework0
7.27.2 The Board sets and oversees culture, objectives and strategy in the insurer's long-term interest0
7.37.3 Board composition, internal practices and powers adequate on an ongoing basis0
7.47.4 Individual Board Members' duties: good faith, care and diligence, the insurer's and policyholders' interests first, independent judgement, no undue advantage0
7.57.5 Board oversight of the design and implementation of risk management and internal controls0
7.67.6 A written remuneration policy that does not induce excessive risk-taking, covering the Board, management, control functions and major risk-takers0
7.77.7 A reliable financial reporting process with defined roles for Board, management and external auditor0
7.87.8 Governance and oversight of the external audit0
7.97.9 Systems for timely and effective communication with the supervisor on governance0
8.18.1 A documented risk management system: risk appetite strategy, risk policy for every material risk, timely response to profile changes0
8.28.2 A documented system of internal controls0
8.38.3 Control functions with authority, independence and resources0
8.48.4 A risk management function that identifies, assesses, monitors, mitigates and reports key risks and sustains a risk culture0
8.58.5 A compliance function that supports legal, regulatory and supervisory obligations and a compliance culture0
8.68.6 An actuarial function advising on technical provisions, pricing, capital adequacy, reinsurance and related compliance0
8.78.7 An internal audit function giving the Board independent assurance on the governance framework0
8.88.8 Undiminished oversight of and accountability for outsourced material activities0
9.19.1 A documented supervisory review and reporting framework, periodically reviewed0
9.29.2 Supervisory plans setting priorities and the depth of off-site monitoring and on-site inspection0
9.39.3 Outsourced material activities reviewed to the same level as in-house ones0
9.49.4 Documented regular reporting requirements: scope, frequency, accounting and audit standards, audited annual statements, material changes and incidents, corrections, additional 0
9.59.5 Ongoing monitoring from communication, supervisory reporting and market information0
9.69.6 On-site inspections with a set objective, scope, timing and work programme0
9.79.7 Findings and needed measures discussed with the insurer as soon as practical0
ASSESSIntroduction and Assessment Methodology: how observance of the ICPs is assessed0
COMFRAMEComFrame: the Common Framework for the Supervision of Internationally Active Insurance Groups0
HISTEdition history and the status of each ICP0
ICP 1ICP 1 Objectives, powers and responsibilities of the supervisor0
ICP 10ICP 10 Preventive measures, corrective measures and sanctions0
ICP 12ICP 12 Exit from the market and resolution0
ICP 13ICP 13 Reinsurance and other forms of risk transfer0
ICP 14ICP 14 Valuation0
ICP 15ICP 15 Investments0
ICP 16ICP 16 Enterprise risk management for solvency purposes0
ICP 17ICP 17 Capital adequacy0
ICP 18ICP 18 Intermediaries0
ICP 19ICP 19 Conduct of business0
ICP 2ICP 2 Supervisor0
ICP 20ICP 20 Public disclosure0
ICP 21ICP 21 Countering fraud in insurance0
ICP 22ICP 22 Anti-money laundering and combating the financing of terrorism0
ICP 23ICP 23 Group-wide supervision0
ICP 24ICP 24 Macroprudential supervision0
ICP 25ICP 25 Supervisory cooperation and coordination0
ICP 3ICP 3 Information sharing and confidentiality requirements0
ICP 4ICP 4 Licensing0
ICP 5ICP 5 Suitability of persons0
ICP 6ICP 6 Changes in control and portfolio transfers0
ICP 7ICP 7 Corporate governance0
ICP 8ICP 8 Risk management and internal controls0
ICP 9ICP 9 Supervisory review and reporting0
ICPSThe Insurance Core Principles and ComFrame, updated December 2024: what they are and what is held0

Tell me when IAIS Insurance Core Principles (ICPs) files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

  • Peer review records
  • Analysis notes
  • Tool output
  • Reproducibility evidence
  • Coding standards
  • Test environment evidence
  • Stress-testing program feeding risk & capital decisions
  • Stress-testing program
  • ORSA report
  • board approval record

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

What this page is

A control-level reference for IAIS Insurance Core Principles (ICPs), drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition