eBook OR

[OR] [MLRE] [E1] [C2] Understanding Your Organisation

Written by Dr Goh Moh Heng | Feb 20, 2026 8:21:17 AM

Chapter 2 Understanding Your Organisation – Malaysian Life Reinsurance

Introduction

Operational resilience begins with clarity. To build meaningful resilience capabilities, an organisation must first understand who it is, what it does, whom it serves, and how it creates value. This chapter provides a structured understanding of Malaysian Life Reinsurance (MLRe) within the context of ISO 22316 (Organisational Resilience) and the operational resilience expectations issued by Bank Negara Malaysia (BNM).

For Malaysian Life Reinsurance, strengthening resilience is not only about compliance. It is about sustaining confidence in Malaysia’s insurance ecosystem, protecting cedants, and maintaining stability across the financial system during disruption.

Organisational Overview

Malaysian Life Reinsurance is Malaysia’s national life reinsurer, providing reinsurance capacity and technical expertise to life insurers and takaful operators. As a key participant in the financial services sector, MLRe supports risk transfer, capital management, product innovation, underwriting, actuarial services, and claims management for primary insurers.

Its role makes it a systemically important supporting institution within Malaysia’s insurance landscape. A disruption at MLRe may not be directly visible to retail policyholders, but it can materially affect insurers’ ability to manage risk exposures, settle claims, or launch products.

Under ISO 22316, organisational resilience requires:

  • A clear purpose and strategic direction
  • Strong governance and leadership
  • Effective risk management and decision-making
  • Adaptive capacity and learning
  • Engaged stakeholders and clear communication

BNM’s operational resilience framework further reinforces these principles by requiring financial institutions to identify critical business services, set impact tolerances, map dependencies, and test resilience against severe but plausible scenarios.

MLRe’s Role in the Malaysian Financial Ecosystem

As a licensed reinsurer regulated by Bank Negara Malaysia, MLRe operates within Malaysia’s prudential regulatory framework under the Financial Services Act 2013.

MLRe contributes to:

  • Financial system stability
  • Risk absorption during catastrophic or high-severity events
  • Capital efficiency for insurers
  • Technical underwriting and actuarial capability development
  • Product sustainability in life and family takaful markets

Because reinsurance sits upstream in the insurance value chain, MLRe’s resilience has multiplier effects. If MLRe is unable to perform treaty renewals, honour claims recoveries, or process underwriting decisions, cedants may experience liquidity stress, operational bottlenecks, or capital strain.

BNM’s operational resilience expectations therefore extend beyond customer-facing institutions to include entities whose disruption could threaten financial stability.

Regulatory Environment and Compliance Expectations

BNM’s operational resilience policy requires financial institutions to:

  • Identify critical business services
  • Define impact tolerances for severe disruptions
  • Map processes, people, technology, facilities, and third-party dependencies
  • Conduct scenario testing using severe but plausible events
  • Strengthen governance and board oversight
  • Ensure effective crisis management and communication

For MLRe, compliance examples may include:

Identification of Critical Business Services

Examples relevant to MLRe:

  • Treaty underwriting and renewal processing
  • Claims recovery processing
  • Retrocession management
  • Financial reporting and regulatory submissions
  • Investment operations supporting liability matching

BNM expects these services to be clearly defined based on the impact on:

  • Financial stability
  • Policyholder protection
  • MLRe’s safety and soundness
  • Market confidence
Setting Impact Tolerances

Impact tolerances must specify the maximum tolerable disruption, for example:

  • Maximum tolerable downtime for treaty processing systems
  • Maximum delay in claims recovery settlements
  • Maximum period of financial reporting inaccuracy
  • Liquidity impact thresholds

These tolerances must be board-approved and aligned to MLRe’s risk appetite framework.

Mapping Dependencies

MLRe is required to document and understand dependencies such as:

  • Core underwriting and actuarial systems
  • Data centres and cloud infrastructure
  • Outsourced IT service providers
  • Investment custodians
  • Critical third-party data providers
  • Skilled actuarial and underwriting personnel

BNM expects institutions to identify single points of failure and concentration risks, particularly in third-party arrangements and shared services.

Scenario Testing

MLRe must test its resilience against severe but plausible scenarios such as:

  • Prolonged core system outage
  • Cyberattack affecting underwriting data integrity
  • Major pandemic resurgence impacting key personnel
  • Failure of a critical outsourced IT service provider
  • Sudden liquidity shock due to a catastrophic claims surge

Testing must assess whether impact tolerances would be breached and identify remediation actions.

Board and Senior Management Oversight

BNM requires:

  • Active board oversight of operational resilience strategy
  • Integration of resilience into enterprise risk management
  • Regular reporting on resilience metrics and vulnerabilities
  • Clear accountability among senior management

For MLRe, this means operational resilience cannot sit solely within IT or risk functions — it must be embedded into strategic decision-making.

Business Model and Value Chain

Understanding MLRe’s resilience requires analysing its end-to-end value chain.

Risk Assumption and Underwriting

MLRe evaluates mortality, morbidity, and longevity risks. Disruptions in actuarial models, underwriting systems, or data quality can compromise pricing accuracy and capital adequacy.

Claims Recovery and Settlement

Timely claims reimbursement to cedants supports insurers’ liquidity and policyholder obligations. Operational breakdowns here could create systemic ripple effects.

Retrocession Management

MLRe transfers part of its risk to retrocessionaires. Failure in retrocession documentation or counterparty risk management could amplify financial strain.

Investment and Asset-Liability Management

As a life reinsurer, MLRe holds long-term liabilities. Disruptions in investment operations, valuation systems, or custodial services could impair solvency management.

Regulatory and Financial Reporting

BNM expects timely, accurate, and complete reporting. Data integrity issues or system failures could expose MLRe to supervisory action.

Each component must be viewed through an operational resilience lens.

Organisational Culture and Adaptive Capacity

ISO 22316 emphasises that resilience is rooted in culture.

For MLRe, this includes:

  • Strong ethical standards
  • Transparent communication
  • Continuous improvement mindset
  • Cross-functional collaboration
  • Leadership commitment to resilience

BNM’s guidelines reinforce the importance of embedding resilience into everyday decision-making rather than treating it as a compliance exercise.

Practical examples include:

  • Regular crisis simulation exercises involving senior management
  • Cross-training of actuarial and underwriting teams
  • Succession planning for critical roles
  • Post-incident reviews with documented lessons learned
  • Integration of cyber resilience into enterprise risk management

Technology and Digital Resilience

As MLRe modernises underwriting systems and data analytics platforms, technology resilience becomes central.

BNM expects financial institutions to ensure:

  • Robust cybersecurity controls
  • Strong data governance
  • Secure system architecture
  • Backup and disaster recovery capabilities
  • Third-party risk management

For MLRe, digital resilience must consider:

  • Confidential cedant data
  • Actuarial model integrity
  • Financial system interfaces
  • Secure remote working capability

Technology resilience should be regularly stress-tested and aligned with business impact tolerances.

Stakeholder Landscape

MLRe’s resilience must account for multiple stakeholders:

  • Cedant insurers and takaful operators
  • Retrocession partners
  • Regulators
  • Investment counterparties
  • Employees
  • Service providers

Under ISO 22316, stakeholder trust is both an input and an outcome of resilience. BNM’s expectations further require transparent communication during disruptions to preserve market confidence.

Strategic Alignment with Operational Resilience

Operational resilience should support MLRe’s long-term strategy, including:

  • Market expansion
  • Product innovation
  • Digital transformation
  • Talent development
  • Capital optimisation

Resilience considerations should inform:

  • Outsourcing decisions
  • Technology investments
  • Strategic partnerships
  • Mergers or structural changes

This forward-looking integration ensures that resilience strengthens competitive advantage rather than constrains growth.

Understanding Malaysian Life Reinsurance is the foundation for building meaningful organisational resilience.

As a regulated reinsurer operating within Malaysia’s financial system, MLRe must align ISO 22316 principles with the operational resilience expectations of Bank Negara Malaysia. This includes identifying critical business services, setting impact tolerances, mapping dependencies, conducting scenario testing, and embedding strong governance.

Operational resilience for MLRe is not merely about surviving disruption. It is about safeguarding financial stability, protecting the broader insurance ecosystem, and sustaining long-term confidence in Malaysia’s reinsurance market.

By clearly understanding its purpose, structure, dependencies, and regulatory obligations, MLRe positions itself to anticipate shocks, adapt effectively, and emerge stronger from disruption.

Building Organisational Resilience: An Operational Resilience Guide for Malaysian Life Reinsurance

eBook 1: Understanding Your Organisation: Malaysian Life Reinsurance
C1 C2 C3 C4
C5 C6 C7 C8
 

For organisations looking to accelerate their journey, BCM Institute’s training and certification programs, including the OR-5000 Operational Resilience Expert Implementer course, provide in-depth insights and practical toolkits for effectively embedding this model.

 

 

More Information About OR-5000 [OR-5] or OR-300 [OR-3]

To learn more about the course and schedule, click the buttons below for the OR-300 Operational Resilience Implementer course and the OR-5000 Operational Resilience Expert Implementer course.

If you have any questions, click to contact us.