Carriers price every category of risk their policyholders face. Frequency and severity get modeled. Tail correlations get modeled. Even reputational risk for the policyholder gets factored into D&O and cyber pricing. But the category that hits the carrier directly when something breaks publicly sits outside the framework entirely. Reputation events get managed reactively by communications teams reporting into marketing, using tools built for brand storytelling. The function answers to the wrong metrics for the work it is actually being asked to do under pressure.
A reputation event has the financial signature of an operational risk event. Regulatory cycle time lengthens. Distribution friction increases. Customer acquisition cost rises. Capital market posture shifts. These outcomes correlate with each other and with the underlying business exposures that produced the event in the first place. A wildfire season that forces non-renewal communications is the same wildfire season that produces political response, filing delay, and reserve strain on the carrier's balance sheet. One event with multiple balance-sheet expressions. Treating the communications layer as marketing means the correlation never gets priced.
What enterprise risk management requires of the function is operational, not creative. Decision authority needs to be defined before the event, with escalation paths pre-approved at the right governance level. Stakeholder engagement requires sequencing and timing against regulatory and capital realities. Coordination with regulators, agents, and reinsurance partners has to be rehearsed before it matters, and performance under pressure has to be measurable against something resembling a runbook rather than a creative brief.
Almost no carrier has built this. The function exists at most companies. It reports to the wrong executive, uses vocabulary borrowed from agencies, and gets evaluated on outputs that have little to do with how the company performs when something breaks.
An enterprise risk management approach to communications catches that gap the same way internal audit catches process gaps before they harden into control failures. The underwriting move here is straightforward, in the sense that the analytical work already exists in adjacent disciplines.
Communications exposure can be modeled. Frequency at a given carrier correlates with line-of business mix, geographic concentration, regulatory environment, and prior incident history. Severity correlates with response infrastructure maturity, the independence of the function from the business units it covers, and the speed of decision authority under stress. Both variables respond to investment. Both produce loss-ratio effects when ignored.
The industry that built modern risk quantification has the analytical capability to price this category. What it has not yet done is decide that the category exists.
The decision is overdue. Carriers that make it first will find what the rest of the industry finds later. Communications infrastructure operates as an underwriting input, not a cost center. The capital implications of treating it that way compound in the same direction as every other discipline the industry has chosen to professionalize.
Reputation sits on the balance sheet whether carriers price it or not. Pricing it deliberately is cheaper than the alternative.
