How to Build an Internal Insurance Function: Roles, Governance, and Stakeholder Management for Indian Corporates

Most Indian corporates manage insurance as a part-time responsibility of the CFO, company secretary, or administration department. This approach works when the insurance programme is simple: a few policies, one or two locations, straightforward manufacturing or trading operations. It stops working when the programme crosses a threshold of complexity that overwhelms generalist attention.

The indicators that a dedicated insurance function is needed include:

• Annual insurance premium exceeds INR 1 crore. At this premium level, the company is spending enough that even a 10% improvement in programme efficiency generates meaningful savings. The programme likely involves multiple policy types, multiple insurers, and enough complexity that a generalist cannot optimise it.
• Operations span more than three locations or more than one state. Multi-location operations create coordination challenges: different renewal dates, different surveyors, different local compliance requirements. Without a dedicated function, these details are managed reactively.
• A significant claim in the past three years. A major claim reveals the importance of insurance programme quality in a way that day-to-day operations do not. Companies that have been through a large claim almost always conclude that they needed better coverage, better documentation, or better claims management capability.
• Regulated industry or contractual insurance obligations. Pharmaceutical companies, food manufacturers, companies with government contracts, and those with loan covenant insurance requirements face compliance obligations that require ongoing monitoring.
• Growth through acquisition, new facilities, or geographic expansion. Growth changes the risk profile and the insurance programme must evolve in step. Without a dedicated function, insurance programme adjustment lags behind business growth, creating coverage gaps.

For Indian corporates in the INR 500 crore to INR 5,000 crore revenue range, the transition from ad hoc insurance management to a dedicated function typically occurs when two or more of these indicators are present. The function does not need to be large, even a single experienced professional with the right mandate and reporting line can transform the insurance programme's effectiveness. The key is that insurance becomes someone's primary responsibility, not an afterthought.

The reporting line of the insurance function determines its effectiveness more than any other single factor. In Indian corporates, three reporting structures are common, each with distinct advantages and limitations.

Reporting to the CFO

This is the most common structure in Indian mid-market and large corporates. The insurance function sits within the finance department, alongside treasury, tax, and accounts. The advantage is direct access to financial data needed for insurance valuations (sum insured calculations, revenue projections for BI, asset registers), proximity to budget approval processes, and alignment with the CFO's responsibility for financial risk management. The limitation is that the CFO's primary orientation is toward financial performance, not operational risk, which can lead to insurance being managed as a cost to be minimised rather than a risk management tool to be optimised.

Reporting to the CRO or Company Secretary

Reporting to the Chief Risk Officer (CRO). In larger Indian corporates, particularly those with institutional investors, a CRO or equivalent risk function exists. Placing insurance under the CRO aligns it with the broader enterprise risk management framework. The advantage is that insurance decisions are made in the context of the company's total risk profile, including operational, strategic, and compliance risks. The limitation is that the CRO function in many Indian companies is still developing and may lack the operational authority to enforce insurance-related decisions across business units.

Reporting to the Company Secretary or Legal function. In some Indian corporates, particularly those where insurance was historically managed as a compliance activity, the insurance function sits within the secretarial or legal department. The advantage is alignment with regulatory compliance (IRDAI requirements, factory license conditions, environmental mandates). The limitation is that the legal function typically views insurance through a compliance lens rather than a risk management lens, which can produce technically compliant but strategically sub-optimal programmes.

The recommended structure for most Indian corporates in the INR 500-5,000 crore range is a dedicated insurance manager reporting to the CFO, with a dotted-line reporting relationship to the CRO or Audit Committee. This structure provides the financial data access and budget authority of the CFO reporting line, while the dotted-line ensures that insurance decisions are visible to the governance function responsible for overall risk oversight.

Regardless of reporting line, the insurance function must have a clear mandate that includes:

• authority to make programme design recommendations
• budget to engage external advisors (brokers, risk consultants, valuers)
• access to operational data from all business units
• a seat at the table when business decisions with insurance implications are being made (new facility construction, acquisitions, new product launches, contract negotiations)

Recruiting for the insurance function in India is challenging because the talent pool sits at the intersection of insurance technical knowledge, corporate finance, and operational risk management. Very few Indian professionals possess all three skill sets. The function design should therefore specify which skills must be in-house and which can be sourced from the broker, risk consultant, or other external advisors.

Core in-house skills (must reside in the insurance manager). Insurance programme literacy: the ability to read and interpret policy wordings, understand deductible structures and sub-limits, evaluate the adequacy of sums insured, and identify coverage gaps. This does not require being an insurance underwriter; it requires being an informed buyer who can critically evaluate what the broker and insurer present. Claims management: the ability to manage the claims process from initial notification through surveyor engagement to final settlement, including the ability to challenge surveyor assessments, present documentation effectively, and escalate to the Ombudsman or IRDAI if necessary. Financial analysis: the ability to calculate total cost of risk, evaluate deductible optimisation options, and present insurance programme costs and benefits in terms the CFO and board understand. Stakeholder communication: the ability to translate insurance concepts into business language for non-insurance colleagues, and to translate business requirements into insurance language for brokers and underwriters.

Desirable in-house skills (valuable but can be supplemented by external advisors). Risk engineering: understanding of physical risk factors (fire protection, natural hazard exposure, process safety) and their relationship to insurance terms. This skill is ideally possessed by the insurance manager but can be sourced from the broker's risk engineering team or an independent risk consultant. Regulatory knowledge: understanding of IRDAI regulations, the Insurance Act (1938, as amended), and industry-specific insurance mandates. This evolves constantly and is often best sourced from the broker or a specialist regulatory advisor. Market knowledge: understanding of insurance market cycles, capacity dynamics, and competitive positioning among Indian insurers and reinsurers.

The ideal candidate profile for an Indian corporate's first insurance manager is someone with 8-12 years of experience, typically from an insurance broking firm (where they have developed programme design and claims skills), an insurance company (where they have developed underwriting and risk assessment skills), or a large Indian corporate's existing risk management function. The FIII (Fellow of Insurance Institute of India) or ACII (Associate of Chartered Insurance Institute) qualification indicates formal insurance education. CRM (Certified Risk Manager) or equivalent qualifications indicate risk management breadth.

Compensation benchmarks for this role in the Indian market (2025-26) range from INR 18-35 lakh per annum for a manager with 8-12 years of relevant experience, varying by company size, industry, and location. This is a modest investment relative to the insurance premium spend that the role manages, and the ROI is typically visible within the first renewal cycle.

The relationship between the Indian corporate and its insurance broker is the most critical external relationship in the insurance function. In the Indian market, where intermediary penetration in commercial insurance is still developing (brokers account for approximately 30% of commercial premium, compared to 70% or more in mature markets), the quality of the broker relationship varies enormously. Some corporates treat the broker as an order-taker who places whatever coverage the company requests. Others have developed genuine advisory relationships where the broker actively identifies risks, recommends programme improvements, and advocates for the client in the insurance market.

The internal insurance function should actively shape the broker relationship toward strategic advisory. This requires three structural changes.

First, define the broker's scope of work formally. Indian broking engagements are often governed by informal understanding rather than written service agreements. The insurance function should implement a broker service agreement (BSA) that specifies deliverables:

• annual risk review and gap analysis (due 90 days before renewal)
• renewal market submission with competitive quotations from at least three insurers
• claims advocacy and management support
• risk survey coordination and follow-up
• quarterly stewardship reporting including market intelligence, claims status, and programme performance metrics

The BSA creates accountability and ensures the company receives consistent service.

Second, evaluate broker performance annually. The insurance function should maintain a broker scorecard tracking metrics such as: timeliness of renewal placement (was the policy placed before the existing policy expired?), quality of market submission (did the submission accurately represent the risk and achieve competitive terms?), claims outcome (were claims settled at fair amounts within reasonable timeframes?), advisory proactiveness (did the broker identify risks or coverage gaps that the company had not considered?), and responsiveness (were queries answered within agreed timeframes?). This scorecard should be shared with the broker annually as part of a formal relationship review.

Third, ensure the broker's remuneration structure aligns incentives. Indian insurance brokers are remunerated through commission (typically 10-15% of premium for general insurance) paid by the insurer. This creates a potential misalignment: the broker earns more when the premium is higher. Some Indian corporates are moving toward fee-based remuneration for their brokers, where the broker is paid a fixed advisory fee by the client and returns or reduces the commission. This structure aligns the broker's incentive with the client's interest in programme optimisation rather than premium maximisation.

The insurance function should also maintain direct relationships with key insurers, independent of the broker. While the broker manages the day-to-day relationship and market negotiation, the insurance manager should meet the lead underwriter and claims team at least annually to build rapport, discuss the company's risk management initiatives, and ensure the insurer understands the company's risk quality.

The insurance function is only as effective as its ability to engage internal stakeholders across the company. Insurance decisions are made at the centre, but risk is created and managed at the operational level: the factory floor, the warehouse, the project site, the procurement desk. If the insurance function operates in isolation, it cannot design a programme that matches the company's actual risk profile.

The stakeholder engagement model should cover four groups. Operations and manufacturing. The plant head, production manager, and maintenance manager are the custodians of the company's physical risk. They control housekeeping, maintenance quality, hot-work practices, and emergency response. The insurance function should brief operational leaders annually on the insurance programme, what is covered, what is excluded, and what their role is in maintaining coverage (notifying the insurance function of asset changes, maintaining compliance with risk survey recommendations, and supporting claims documentation after a loss). In return, the operations team provides the insurance function with updated asset information, production data, and hazard notifications.

Procurement and supply chain. The procurement team manages supplier relationships and therefore controls supply chain concentration risk and CBI exposure. The insurance function should provide procurement with a list of critical suppliers whose disruption is insured under the CBI extension, and procurement should notify the insurance function whenever a critical supplier is changed or a new single-source dependency is created. Contractual insurance requirements in supplier agreements (requiring suppliers to maintain their own insurance) should be developed jointly between the insurance function and procurement.

Legal and compliance. The legal team manages contracts that contain insurance clauses, from customer agreements to lease contracts to loan covenants. The insurance function should be consulted whenever a contract with insurance implications is being negotiated, to ensure that the company does not commit to coverage levels that it does not carry or cannot obtain. The legal team should also route all regulatory compliance requirements that have an insurance component (factory license conditions, environmental clearance terms) to the insurance function for verification.

Human resources. The HR function manages employee-related insurance (group health, group personal accident, employers' liability) and is the first point of contact for employee insurance queries. While these covers are often managed separately from the commercial insurance programme, the insurance function should have oversight to ensure consistency, adequate coverage, and compliance with the Employees' Compensation Act. Post-loss employee communication (such as reassuring workers after a factory fire) is a joint HR and insurance function responsibility.

The insurance function should conduct an annual 'insurance awareness' briefing for all stakeholder groups, covering the company's insurance programme summary, the claims process, the importance of timely notification, and each stakeholder's specific responsibilities. This briefing, documented as part of the insurance function's operating procedures, demonstrates governance maturity to both the board and the insurers.

The insurance function's budget has three components: people cost (salaries and benefits of the insurance team), advisory cost (broker fees, consultant fees, valuation charges), and programme cost (insurance premiums, which are typically the largest line item but are managed by the function rather than budgeted to it). For budget approval purposes, the CFO needs a clear cost-benefit analysis.

People cost. For an Indian corporate in the INR 500-5,000 crore range, the insurance function typically comprises one to three professionals. A single insurance manager at INR 25 lakh per annum, supported by an analyst at INR 10 lakh, represents a total people cost of INR 35 lakh. For larger companies or those with complex programmes (multiple industries, international operations, significant claims activity), the team may expand to four or five, with a total people cost of INR 80 lakh to INR 1.2 crore.

Advisory cost. The broker's remuneration is typically embedded in the premium (commission basis) and does not appear as a separate cost. However, if the company moves to a fee-based arrangement, the broker advisory fee for a programme with INR 1-5 crore in total premium typically ranges from INR 10-25 lakh per annum. External risk consulting (independent of the broker) costs INR 5-15 lakh per engagement. Professional valuations for sum insured adequacy cost INR 3-10 lakh per facility. In aggregate, advisory costs typically range from INR 15-50 lakh per annum.

Total function cost (excluding premium). INR 50 lakh to INR 1.7 crore per annum for most Indian corporates in the target revenue range. This represents 3-8% of the annual insurance premium spend.

The value justification should focus on three measurable outcomes:

• Premium optimisation. A dedicated function typically achieves 10-20% improvement in premium efficiency within the first two renewal cycles, through better sum insured accuracy (eliminating overpayment), deductible optimisation, competitive market testing, and negotiation of risk improvement discounts. For a company paying INR 2 crore in annual premium, a 15% improvement saves INR 30 lakh per year.
• Claims improvement. A dedicated function improves claims outcomes through better documentation, earlier notification, more effective surveyor engagement, and stronger negotiation. Industry experience suggests a 15-25% improvement in claims recovery rates.
• Coverage adequacy. A dedicated function identifies and closes coverage gaps that would otherwise result in uninsured losses. The value of this is not realised until a loss occurs, but the expected value (probability of loss multiplied by the uninsured gap amount) can be estimated using the company's loss history.

The ROI calculation typically shows that the insurance function pays for itself within 12-18 months through premium savings alone, with claims improvement and coverage adequacy providing additional value. For most Indian CFOs, this payback profile is compelling, particularly when compared to other corporate functions with less quantifiable returns.

Presenting the budget request in this framework, separating the function cost from the premium spend and demonstrating measurable ROI, transforms the conversation from 'we need to hire someone for insurance' to 'an investment of INR 50 lakh will generate INR 30 lakh in annual premium savings.'

A dedicated insurance function must be held accountable through measurable KPIs that the board and CFO can monitor. Without defined metrics, the function's value becomes invisible, and it is vulnerable to cost-cutting during lean periods. The KPIs should cover efficiency, effectiveness, and governance.

Efficiency KPIs measure how well the function manages insurance costs. Total cost of risk (TCOR): the sum of insurance premiums, retained losses (deductibles and uninsured losses), internal administration costs, and external advisory costs, expressed as a percentage of revenue or total insured value. The target is to reduce TCOR year-over-year through programme optimisation. Premium benchmark: the company's premium rate (premium as a percentage of sum insured) compared to industry benchmarks. Indian industry associations and broking firms publish benchmark data that can be used for comparison. Renewal efficiency: the percentage of policies renewed before expiry, the number of competitive quotations obtained per renewal, and the average premium savings achieved through market competition.

Effectiveness KPIs measure how well the function manages risk transfer. Coverage adequacy score: the percentage of identified risk exposures that are covered by the insurance programme at adequate limits. A gap analysis conducted annually produces this score. The target is 100%, though in practice, some residual gaps are accepted within the risk appetite framework. Claims recovery ratio: the ratio of insurance claim recoveries to total insured losses. This measures how effectively the function manages the claims process. A high recovery ratio (85% or above) indicates effective documentation, notification, and negotiation. A low ratio (below 70%) suggests coverage gaps, claims management deficiencies, or both. Claims cycle time: the average time from loss occurrence to final claim settlement. Shorter cycle times indicate better claims management and insurer relationships.

Governance KPIs measure compliance and risk management discipline. Policy compliance rate: the percentage of regulatory and contractual insurance requirements that are met by the current programme. Risk survey recommendation compliance: the percentage of insurer risk survey recommendations that have been completed within the recommended timeframe. Reporting timeliness: whether the quarterly risk and insurance reports are delivered to the CFO and board on schedule.

These KPIs should be compiled in a quarterly insurance function dashboard and presented to the CFO. An annual detailed review should be presented to the Audit Committee or board, including a year-over-year comparison and a plan for the upcoming year. The dashboard format should be concise: a single page showing current values, targets, and trend arrows for each KPI.

The selection of KPIs should be tailored to the company's maturity. In the first year of the insurance function, the focus should be on foundational metrics: TCOR calculation (establishing the baseline), coverage adequacy assessment (identifying gaps), and claims register creation (documenting all open claims). In subsequent years, the focus shifts to improvement metrics: TCOR reduction, gap closure progress, and claims recovery improvement.

The insurance function should be designed for scalability. A company that starts with a single insurance manager today may need a team of five within three years if the business grows through acquisitions, geographic expansion, or diversification into higher-risk industries. The organisational design should anticipate this growth rather than requiring a restructure at each stage.

Stage 1: Single insurance manager (companies with INR 500-1,500 crore revenue, INR 50 lakh to INR 1.5 crore annual premium). The manager handles all insurance activities: programme design, renewal coordination, claims management, compliance monitoring, and stakeholder engagement. The broker provides the technical support that the single manager cannot deliver alone. At this stage, the function is primarily operational, focused on ensuring policies are in place, claims are managed, and basic compliance is maintained.

Stage 2: Insurance manager plus analyst (companies with INR 1,500-3,000 crore revenue, INR 1.5-3 crore annual premium). The analyst handles data management (maintaining asset registers, tracking claims, compiling renewal data), freeing the manager to focus on strategic activities: programme design optimisation, broker and insurer relationship management, risk appetite alignment, and board reporting. At this stage, the function begins contributing strategic value through proactive gap identification and cost optimisation.

Stage 3: Insurance team of three to five (companies with INR 3,000-10,000 crore revenue, INR 3-10 crore annual premium). The team may include a senior insurance manager (or Risk Manager title), a programme specialist handling renewals and placement, a claims specialist handling the growing volume and complexity of claims, and an analyst handling data, reporting, and compliance. At this stage, the function operates as a centre of excellence, setting standards for the entire organisation and driving a multi-year risk improvement programme.

Stage 4: Enterprise risk management function (companies with INR 10,000 crore or more in revenue). At this scale, the insurance function typically evolves into or merges with a broader enterprise risk management (ERM) function, headed by a CRO or equivalent. The insurance programme is one component of a total risk management framework that includes operational risk, strategic risk, compliance risk, and emerging risks such as cyber, climate, and geopolitical.

The transition between stages should be triggered by complexity growth, not just revenue growth. A company that makes an acquisition, enters a new country, or faces a major loss may need to accelerate the transition by 12-18 months. Conversely, a company with simple operations and stable risk profile may operate comfortably at a given stage for an extended period.

For Indian corporates planning this progression, the key is to define the next stage's requirements in advance and recruit or develop talent proactively. Insurance professionals with the right combination of technical, financial, and communication skills are scarce in the Indian market. Companies that build the function early and invest in developing their insurance team create a durable competitive advantage in risk management and cost efficiency.