PML, MFL and the COPE Study: How Indian Property Underwriters Derive Maximum Loss and How Brokers Challenge an Inflated PML

Every property underwriting decision of any size turns on an estimate of how bad a single loss at the location can realistically be, and that estimate is captured in two numbers: the Probable Maximum Loss (PML) and the Maximum Foreseeable Loss (MFL). These are not the sum insured, and they are not the same as each other, and the difference between them and the way they are derived governs how the risk is priced, how it is reinsured, how much the insurer retains net, and whether the sum insured is adequate. A broker or underwriter who does not understand how the PML is built cannot challenge it when it is wrong, and an inflated PML is one of the more common and costly errors in Indian property placement.

The two numbers answer related but distinct questions. Maximum Foreseeable Loss (MFL) is the worst loss that could occur if everything that could go wrong does go wrong: the fire-protection systems fail, the fire brigade does not arrive in time, and the fire spreads to the limit allowed by the physical separation of the property. It is the pessimistic, protection-discounted estimate. Probable Maximum Loss (PML) is the worst loss that can realistically be expected to occur given that the protections that are present and reliable do work as intended: the sprinklers operate, the firewalls hold, the fire brigade responds. PML is therefore lower than MFL for a well-protected risk, because it gives credit for the protections that MFL ignores. Both are usually expressed as a percentage of the total sum insured or total exposed value at the location.

In the post-de-tariff Indian market, these numbers carry more weight than they did under the old tariff regime. Under the All India Fire Tariff, fire rates were largely set by the tariff, and the underwriter's discretion was limited. Since de-tariffing of the fire portfolio, insurers price fire risk on their own assessment, and the PML, with the COPE study behind it, is central to that assessment: it drives the rate, the reinsurance structure and the net retention. A risk whose PML is well-derived and well-protected can be priced and placed on far better terms than one whose PML is high or poorly supported. So the PML is not a back-office number; it is the hinge of the whole placement, and getting it right, or challenging it when it is set too high, is where a broker adds real value.

This piece sets out how PML and MFL are derived from a COPE study, how the elements of COPE, separation, firewalls, sprinkler credits, move the numbers, how the PML drives sum-insured adequacy, reinsurance and net retention, and how a broker can challenge an inflated PML on evidence.

PML and MFL are not guessed; they are derived from a structured assessment of the risk called a COPE study, after its four elements: Construction, Occupancy, Protection and Exposure. A property risk survey, conducted by a surveyor or risk engineer, gathers the COPE data, and the PML and MFL are built from it. Understanding the four pillars is the precondition for understanding, and challenging, the loss estimate.

Construction

Construction is the physical fabric of the building and how it behaves in a fire: the structural frame, the walls, the floors and the roof, and above all the fire resistance of the construction and the presence of fire-resisting divisions. Non-combustible construction (reinforced concrete, masonry) resists and contains fire far better than combustible construction (timber, combustible insulated panels), and fire-rated walls and floors that divide the property into separate fire areas limit how far a fire can spread. Construction is the first determinant of how large a loss can grow, because it sets whether a fire is contained or free to spread through the structure.

Occupancy

Occupancy is what the building is used for and what is inside it: the process, the materials handled and stored, the fire load (the quantity and combustibility of the contents), the ignition sources and the hazard of the operation. A cold store with combustible insulation, a chemicals plant with flammable liquids, a paper or textile mill with high combustible fire load, and a low-hazard assembly operation present very different occupancy hazards, and occupancy strongly influences both the likelihood of a fire and how fiercely it burns once started. Occupancy is often the single biggest driver of the loss estimate.

Protection. Protection is the fire detection, suppression and firefighting provision: automatic sprinklers, hydrant systems, water storage and pumps, fire detection and alarm, fire-resisting doors and dampers, the on-site fire team and the public fire brigade response. Protection is what stands between an ignition and a total loss, and it is the element that distinguishes PML from MFL: MFL assumes the protection fails, PML gives credit for protection that is present, well-maintained and reliable. Strong, reliable protection lowers the PML; weak or unreliable protection raises it toward the MFL.

Exposure. Exposure is the external dimension: the separation between buildings and between fire areas, the exposure to neighbouring risks (a fire next door spreading in), and the external perils (flood, earthquake) that bear on the location. Separation, the physical distance between buildings or the firewalls between fire areas, is decisive for PML, because it limits how far a single fire can spread, and therefore caps the loss. Two identical buildings 50 metres apart with no combustible link between them are unlikely to burn in a single event; the same two buildings sharing a wall or close together can burn as one.

The four pillars work together. Construction and exposure set how far a fire can spread, occupancy sets how likely and how fierce a fire is, and protection sets whether it is stopped before it reaches the limits that construction and exposure allow. The PML and MFL are the underwriter's reasoned estimate, built from these four, of how large a single loss can realistically and foreseeably be.

The general framework is one thing; the specific features that move the PML up or down are where the underwriting and the broker's challenge actually happen. Three features dominate: separation, firewalls and sprinkler credits.

Separation and firewalls define the loss area

The single most powerful determinant of PML for a multi-building or multi-area site is how the site divides into independent fire areas. If a site is one large undivided building, a single fire can in principle involve the whole building, and the PML is high, a large percentage of the total value. If the same total value is split into several buildings with adequate physical separation between them, or into fire areas divided by fire-rated walls (firewalls) that can be relied on to stop a fire, then a single fire is confined to one area, and the PML is the value of the largest single fire area, not the whole site. This is the central mechanism: separation and firewalls reduce the PML by reducing the area a single fire can consume.

For the credit to be given, the separation or firewall has to be genuinely reliable. A firewall only stops a fire if it is fire-rated to an adequate standard, extends fully (including through the roof where required), and is not breached by unprotected openings, doors, conveyors, cable and pipe penetrations, or combustible material bridging it. A firewall with an unprotected doorway or an unstopped conveyor opening is not a firewall for PML purposes, because the fire passes through the breach. The reliability of the separation, the rating, the completeness, the protection of every penetration, is exactly what the survey examines and exactly what a broker must be able to document to claim the PML credit.

Sprinkler credits

Automatic sprinklers are the most significant protection credit in PML estimation. A properly designed, installed and maintained sprinkler system, designed to the appropriate standard for the occupancy and hazard, with adequate water supply and density, can be relied on to control or extinguish a fire in its early stages, which sharply reduces the loss a fire produces and therefore reduces the PML. The sprinkler credit is the clearest expression of the PML-versus-MFL distinction: the MFL assumes the sprinklers fail and the fire spreads unchecked, while the PML gives credit for sprinklers that work, and the gap between the two for a sprinklered risk is large.

But the credit depends entirely on the sprinkler system being adequate and reliable. The system has to be designed to the right standard for the hazard (a system designed for a light hazard does not protect a high-hazard occupancy), the water supply has to be sufficient in pressure, flow and duration, the system has to be maintained and tested, and the protected area has to match the design (high-piled or rack storage needs in-rack sprinklers, not just ceiling sprinklers). A sprinkler system that is under-designed for the actual hazard, has an inadequate water supply, or is poorly maintained does not earn the full credit, and the PML stays high. The quality and adequacy of the sprinkler protection, not merely its presence, determines the credit.

The PML is not an academic estimate; it feeds three operational decisions, sum-insured adequacy, reinsurance structure and net retention, and understanding the feed-through is what lets a buyer see why the PML matters to its programme.

PML does not replace the sum insured

A common and dangerous confusion is to treat the PML as the amount to insure. It is not. The sum insured must reflect the full value at risk, the full reinstatement-value reconstruction cost of the property and the full value of the contents, regardless of the PML. The PML is the underwriter's estimate of the likely maximum single loss; the sum insured is the maximum the policy will pay and the basis on which the average clause operates. If a buyer insures only to the PML rather than to the full value, it is under-insured, and the average clause will reduce every claim, including a partial loss well below the PML, in proportion to the under-insurance. The PML informs how the insurer prices and reinsures the risk; it does not reduce the sum insured the buyer must carry. The buyer must insure to full reinstatement value and let the underwriter use the PML for its own pricing and reinsurance purposes.

Reinsurance structure

The PML drives how the insurer reinsures the risk. An insurer writing a large property risk does not retain the whole exposure; it cedes part to reinsurers through treaty and, for large or unusual risks, facultative reinsurance. The PML tells the insurer how much loss a single event can realistically produce, which is what it needs to protect against, so the PML is central to how much reinsurance the insurer buys and how the risk is ceded. A lower, well-supported PML means the insurer needs less reinsurance protection for the risk, which makes the risk cheaper for the insurer to carry and therefore cheaper to write for the buyer. A high PML means the insurer must arrange more reinsurance, which raises the cost. This is one channel by which a well-derived, low PML translates into better terms for the buyer.

Net retention. The net retention is the part of the risk the insurer keeps on its own account after reinsurance. The PML governs how much the insurer can comfortably retain net, because the net retention exposes the insurer's own capital to a single loss, and the insurer sizes that retention against the PML it believes the risk carries. A reliable, low PML lets the insurer retain more comfortably and price more competitively; a high PML forces more cession and a more cautious stance. In the post-de-tariff market, where insurers manage their own net retention and reinsurance economics rather than working to a tariff, the PML's influence on retention and reinsurance is a direct driver of the price and capacity the buyer is offered.

The through-line for the buyer. The through-line is that a well-derived, well-protected, low PML benefits the buyer through cheaper reinsurance, more comfortable net retention and better pricing, while the sum insured must always be set to full value regardless of the PML. The buyer captures the benefit of a good PML by investing in and documenting genuinely reliable protection and separation, which earns the credits that lower the PML, while never letting the PML tempt it into under-insuring the sum insured.

An inflated PML, one set higher than the risk genuinely warrants, costs the buyer in price and capacity, and challenging it on evidence is one of the higher-value things a broker does on a property placement. An inflated PML usually arises from one of a few causes, and each has a corresponding line of challenge.

Why a PML gets inflated

A PML is set too high when the underwriter or surveyor does not give credit for protections and separations that genuinely exist and are reliable, or assumes a worse spread than the physical reality supports. Common causes:

• The survey did not capture or did not credit a reliable firewall or separation, so the PML is set on a larger loss area than a single fire can actually involve.
• The sprinkler or other protection is present and adequate but the survey did not credit it fully, perhaps for lack of documentation of its design, water supply or maintenance.
• The PML was set conservatively in the absence of a current, detailed survey, a default high PML used because the evidence to justify a lower one was not presented.
• An old PML was carried forward without re-assessment after the buyer improved the protection or separation.

The lines of challenge

A broker challenges an inflated PML with evidence, not assertion. The lines of challenge follow the COPE elements:

1. Document the separation and firewalls. If the site divides into independent fire areas by adequate separation or reliable firewalls, document them: the fire ratings, the completeness, the protection of every penetration. If a single fire cannot spread beyond one area, the PML should reflect the largest single fire area, not the whole site. This is usually the most powerful challenge, because separation can cut the PML sharply.
2. Evidence the protection credits. Document the sprinkler system's design standard, water supply (pressure, flow, duration), maintenance and testing records, and that it matches the hazard and the storage configuration. Reliable, well-evidenced protection earns the credit that lowers the PML; the broker's job is to supply the evidence the underwriter needs to give it.
3. Commission a current, detailed survey. Where the PML was set conservatively for lack of a good survey, a current detailed risk survey by a competent surveyor or risk engineer that captures the COPE properly often justifies a lower PML than a default conservative figure. A well-run survey that documents reliable construction, protection and separation is the foundation of a fair PML.
4. Re-assess after improvements. If the buyer has improved protection or separation since the PML was last set, a re-assessment should capture the improvement and lower the PML. An old PML carried forward ignores the buyer's risk-improvement investment.

The discipline of the challenge is that it must be evidence-based and honest. A broker cannot argue a PML down by asserting protections that are not reliable or separations that are breached; an underwriter will test the claim at survey and, if a loss occurs, the reality will out. The legitimate challenge is to ensure the PML reflects the genuine, documented, reliable protection and separation the risk actually has, so the buyer is not penalised by a PML inflated through missing evidence or stale assessment. Done well, the challenge lowers the PML to its true level, which improves the reinsurance economics, the net retention and the price the buyer is offered.

The whole exercise, the COPE study, the protection and separation credits, and the PML challenge, turns on the survey evidence and on how the wordings, sub-limits and reinstatement provisions interact with the loss estimate across the competing insurers. Sarvada gives commercial-insurance brokers and corporate risk teams structured, searchable access to insurer property policy wordings and the market intelligence around them, so a buyer's advisers can align the COPE-based loss estimate with the right sum insured, reinstatement and sub-limit structure and compare how insurers treat the protected risk. Brokers and risk managers placing or challenging the PML on large property risks can Request Access to evaluate the platform.

Pulling the technical thread together, getting the PML right is a discipline that serves both a fair price and an adequate programme, and it rests on a few principles a broker and underwriter should hold to.

Build the PML from a real COPE study

The PML should rest on a current, detailed COPE study, Construction, Occupancy, Protection, Exposure, gathered by a competent survey, not on a default percentage or a stale figure carried forward. The four pillars together produce a reasoned estimate of the realistic maximum single loss, and a well-run survey that captures them properly is the foundation of both a fair PML and a credible placement. The investment in a good survey pays back through the better terms a well-supported PML earns.

Insure to value, price on the PML

The two numbers serve two purposes and must not be confused. The sum insured must be set to full reinstatement value, the full reconstruction cost and contents value, so the average clause does not bite and a partial loss is paid in full. The PML is the underwriter's pricing and reinsurance estimate of the realistic maximum loss. A buyer insures to value and lets the underwriter price and reinsure on the PML; a buyer that insures only to the PML is under-insured and will be averaged at claim time. Keeping the two roles distinct is the single most important practical discipline.

Earn the credits, then claim them. A low PML is earned by genuinely reliable protection and separation, and claimed by documenting them. The buyer that invests in adequate sprinklers, reliable firewalls and good separation, and maintains and documents them, earns a low PML that improves its reinsurance economics, net retention and price. The broker's role is to assemble the evidence, ratings, design standards, water supply, maintenance and test records, separation completeness, that lets the underwriter give the credits, and to challenge an inflated PML where the evidence supports a lower one. The credit follows the evidence of reliability, so the discipline is to make the risk genuinely good and then prove it.

Re-assess as the risk changes. The PML is not set once forever. As the buyer improves protection, adds separation, changes occupancy or expands the site, the PML should be re-assessed, downward when the buyer improves the risk, upward when the exposure grows, so it continues to reflect reality. A PML carried forward unexamined drifts away from the true risk and either penalises the buyer (when it is too high after improvements) or under-protects the insurer (when it is too low after the risk grows).

The practical reward for this discipline is a property programme that is fairly priced, adequately insured and credibly placed, where the loss estimate reflects the real risk and the buyer captures the full benefit of the protection it has built. Sarvada gives commercial-insurance brokers and corporate risk teams structured, searchable access to insurer policy wordings so they can align the COPE-based loss estimate with the right cover structure, compare how insurers treat well-protected risks, and place a well-supported PML on the best available terms. Brokers and risk managers building or challenging the PML on Indian property risks can Request Access to evaluate the platform.