ORSA is done once a year
And the rest of the year, risk changes. Without a living system, the report is already outdated the day it’s approved.
Insurers, mutuals and brokers
GRC software for the insurance sector
Operational risk, ORSA, DORA, continuity and compliance in a single platform. What the risk function reports and what the board sees finally match up.
What we hear in the sector
The challenges insurers tell us about
The problem isn’t knowing the obligations: it’s being able to prove at any time that you comply, without repeating the same work over and over again.
Key functions don’t share the same baseline
Risk, compliance, internal audit and actuarial work on different versions of the same control.
DORA lands in an already crowded space
On top of Solvency II and IDD now comes digital operational resilience, with third-party registers and incident reporting.
GlobalSuite® in your organization
One platform. The answers they’re going to ask you for.
Everything shares the same inventory of processes, assets, controls and third parties. You update once and it’s reflected in risk, compliance, continuity and audit.
From the heat map to the ORSA report
Qualitative and quantitative risk on the same matrix, with aggregation by line of business and by group entity.
Taxonomy aligned with Solvency II
Quantitative scenarios and expected loss
Aggregation by line of business, entity and group
Data traceability down to the control
ICT providers, with name and criticality
Information register, due diligence, contractual clauses and resilience testing on the same inventory.
Information register in the official template
Critical functions identified and assessed
Documented exit strategies
Major incidents with notification deadlines
AI reads the standard and your documentation. You decide.
Gap analysis on real policies and procedures, with the reference to the article that isn’t covered.
Gaps detected against real documentation
Clause proposal with its reference
Assisted review of controls and evidence
Human approval and a complete audit trail
Each role, its response
One platform each role makes their own
Everyone works on the same data, but each person comes in through their own door and sees what’s theirs. No duplication, no asking for it again.
Profile · CRO
ORSA stops being an annual snapshot.
Risk is updated when it changes, not when the report is due. And the report comes from the same baseline.
Qualitative and quantitative operational risk
Documented scenarios and stress testing
Appetite and tolerance by line of business
Consolidation across the whole group
Their day-to-day in GlobalSuite®
RISKInherent and residual map
RISK AIQuantitative scenarios
BI ANALYTICSExposure by line of business
AUDITMitigation actions
AI suggests risks, controls and assessments based on the entity’s historical data.
Profile · Compliance
Solvency II, IDD and DORA in a single matrix.
Each obligation with its control, owner and evidence. No three separate inventories.
Preloaded regulatory map for the sector
Obligations with owner and due date
Conduct and distribution policy (IDD)
Evidence ready for the supervisor
Their day-to-day in GlobalSuite®
COMPLIANCEMulti-standard matrix
COMPLIANCEOverdue obligations
AIGaps detected
PRIVACYData processing
AI for Compliance detects the gap and proposes wording with the reference to the article.
Profile · Internal audit
Three key functions, a single thread.
Annual plan, findings and follow-up connected to the entity’s universe of risks and controls.
Auditable universe connected to risks
Digital, traceable working papers
Findings with action and owner
Maturity by process and by function
Their day-to-day in GlobalSuite®
AUDITAnnual plan coverage
AUDITFindings by criticality
RISKRisks without control
DOCUMENTSWork evidence
AI reviews assessments and evidence before you do and flags inconsistencies.
Profile · Board
The entity’s risk, in your language.
Consolidated exposure, material incidents and regulatory status, with details one click away.
Configurable executive dashboard
Consolidated group exposure
Status of each critical obligation
From aggregated data to evidence
Their day-to-day in GlobalSuite®
BI ANALYTICSConsolidated exposure
COMPLIANCEDORA compliance
RISKMaterial incidents
BI ANALYTICSBoard report
AI drafts the board report using the platform’s data.
Frameworks and regulations
What they require from you here and there, in one place
Frameworks come preloaded with their controls and relationships. If you work across multiple jurisdictions, you manage a single matrix.
Insurance regulation
Solvency II
ORSA
IDD
EIOPA
AML-CFT
SCIIF
Do you work with a framework that isn’t on the list? We’ll configure it with you. Tell us which one.
How we do it
Live in 3 to 6 months, not two years
We’re consultants as well as a vendor. We don’t leave you with an empty platform: we get it up and running with your risk model and your language.
WEEKS 1-3
Assessment and model
We review your risk taxonomy, your process map and the obligations that apply to you. No generic templates.
MONTH 1-2
Configuration
We configure modules, frameworks, approval workflows and role-based permissions. No custom development.
MONTH 2-4
Load and integration
We migrate your risks, controls, third parties and evidence. We connect SSO, directory and the sources you already use.
MONTH 3-6
Go-live
Role-based training, first real assessment cycle, and support through the first report to the committee.
Frequently asked questions
What we’re always asked before getting started
Is yours missing? Write to us and a person from the GRC team will reply, not a form.
TALK TO AN EXPERTDoes it integrate with our insurance core system?
Yes, via API. We keep traceability to the data source so the evidence remains valid for the supervisor.
Does it work for a group with multiple entities?
Yes. Each entity manages its own reality and the group consolidates into a single comparable view, without duplicating work.
Does it cover the risk of pricing models?
Yes. AI systems are inventoried and classified under the EU AI Act and ISO 42001, with their impact assessment and controls.
Can we see your operational risk map inside GlobalSuite®?
A 45-minute session with a consultant who knows the insurance sector. You bring your matrix.