Concentration Risk and the Standard Formula's Blind Spots: What Your SCR Module Isn't Telling You
The Formula Is Working. The Problem Is What It's Solving.
Solvency II's concentration risk sub-module does exactly what it was designed to do. It identifies single-name issuer exposures above a defined threshold, applies a risk factor calibrated by credit quality, and produces a capital charge. The calculation is deterministic, auditable, and consistent across firms.
The problem isn't that the formula is broken. The problem is that real portfolio concentration risk is a fundamentally different shape than the formula was built to capture.
This piece is about that gap — four specific blind spots in the standard formula concentration module — and what it takes to see past them.
How the Standard Formula Concentration Module Actually Works
The concentration risk sub-module calculates excess exposure per single-name issuer: for each name, the excess above a threshold is determined, where the threshold varies between 15% and 1.5% of total assets depending on credit quality step, and a risk factor between 0% and 73% is applied by credit quality step to produce the capital charge per name.
The standard formula's risk modules are aggregated step by step using correlations that estimate the probability of different risks occurring simultaneously.
This architecture produces a capital requirement that is conservative at the single-name level and diversified at the aggregate level. It works well for its stated purpose: ensuring that no single issuer failure can deplete own funds catastrophically.
What it does not do, and was never designed to do, is detect structural concentration. The kind that builds up below thresholds, across correlated names, through sector clustering, or through the interaction of concentration and duration.
Four Blind Spots
1. Cross-issuer sector and geographic concentration
The formula operates name by name. A portfolio holding 8% in Issuer A and 7% in Issuer B — both investment-grade Italian banks — produces zero excess concentration under the formula. Each exposure is below the threshold for their credit quality step. The formula has nothing to report.
But a sovereign spread shock or banking sector stress event hits both simultaneously. The 15% threshold, designed to limit single-issuer risk, offers no protection against correlated sector exposure distributed across multiple names.
This is the most common form of hidden concentration in insurance portfolios: diversified by issuer count, concentrated by risk factor. The formula is blind to it because it was designed around issuer granularity, not risk factor exposure.
2. Correlated name clusters below the threshold
Two issuers in different sectors and different geographies can share identical macro risk sensitivity — both highly levered to EUR interest rate movements, or both exposed to the same supply chain disruption. Under the standard formula, they are treated as independent exposures. The correlation matrix between sub-modules provides a broad diversification adjustment, but it doesn't model intra-module name-level correlation.
Solvency II's investment risk management policy requires firms to articulate how they have identified and are managing potential correlation or contagion risks between assets that would lead to excessive concentration — risks common to a material proportion of the portfolio. That requirement exists precisely because the formula doesn't capture it. The ORSA is supposed to close the gap. In practice, this analysis is rarely done with the granularity needed to find it.
3. Threshold optimisation
The standard formula creates an implicit incentive structure: stay below the single-name threshold and generate no concentration capital charge. Portfolios managed to this constraint can be structurally concentrated — 14.9% in each of ten names within the same sector — while producing a concentration SCR of zero.
This isn't fraud. It's rational optimisation within the formula's rules. But it means that the concentration module, as designed, is gameable in a way that leaves real risk invisible to the capital calculation.
4. Duration × spread interaction
This is the subtlest and most consequential blind spot for typical insurance portfolios.
A portfolio concentrated in long-duration BBB-rated corporates carries compounded risk: spread widening affects NAV proportionally to duration. A 100bps spread widening on a 10-year bond produces roughly twice the NAV impact of the same shock on a 5-year bond. Concentration in a specific duration bucket within a credit quality band amplifies spread risk in a way that neither the spread sub-module nor the concentration sub-module captures independently.
The standard formula's sub-modules deal separately with interest rate risk, equity risk, spread risk, currency risk, and concentration risk, with correlations providing the prescribed linkage between them. But that prescribed correlation is a single number between spread risk and concentration risk at the module level. It doesn't model the interaction of duration and spread exposure within a specific credit cluster. That cross-term is invisible to the formula.
What This Means in Practice
A portfolio that passes the standard formula concentration module with zero excess charge can simultaneously be:
- Structurally concentrated in Italian financial sector credit
- Exposed to correlated macro risk factors across ostensibly diversified names
- Optimised to stay below per-name thresholds while building sector exposure
- Amplifying spread risk through duration concentration in BBB corporates
None of these exposures generate capital. All of them represent real risk. The formula isn't measuring the same thing as the risk.
This is not a criticism of Solvency II. The standard formula was designed as a calibrated, proportionate capital requirement — not as a comprehensive risk detection tool. The SCR standard formula is designed to ensure that all quantifiable risks to which an undertaking is exposed are taken into account, calibrated to survive all but the most extreme risks that occur less than once every 200 years. That's a capital adequacy objective, not a portfolio intelligence objective. The two are different problems.
The mistake is treating the formula's output as a complete picture of concentration exposure.
The Intelligence Layer: What It Takes to See Past the Formula
Closing these blind spots requires analysis that runs alongside the standard formula, not instead of it. The formula handles capital adequacy. The intelligence layer handles risk detection.
In practice, that means three things:
Risk factor decomposition. Rather than analysing exposure by issuer name, decompose the portfolio by underlying risk factors — sector, geography, rating migration sensitivity, duration bucket, macro sensitivity. This surfaces structural concentration that name-level analysis misses.
Cluster detection. Identify groups of names that behave similarly under stress scenarios, regardless of their formal classification. A BBB Italian bank and a BBB Italian corporate may carry different risk factor codes but respond identically to a sovereign spread shock. The cluster is the unit of analysis, not the individual name.
Cross-module interaction stress testing. Run scenarios that combine spread widening with duration-specific NAV impacts, or sector shocks with geographic clustering. These cross-module scenarios are exactly what the correlation matrix between sub-modules approximates poorly.
At RemitRix, this is the analytical layer we've built on top of standard formula outputs. The platform runs AI-assisted cluster detection across the portfolio, identifies correlated name exposure that the single-name threshold misses, and surfaces duration-amplified spread concentration before it becomes a capital event. The SCR calculation stays with the formula — deterministic, auditable, supervisable. The concentration intelligence lives in the layer above it.
The Practical Takeaway
If your concentration risk analysis begins and ends with the standard formula sub-module output, you are measuring compliance, not risk.
The formula tells you whether you have a capital charge. It doesn't tell you whether you have a problem.
For insurance portfolios in 2026 — navigating a spread environment still elevated relative to pre-2022 levels, with increased sovereign risk in European periphery credits and sector rotation creating new correlation clusters — the gap between what the formula measures and what actually constitutes portfolio concentration risk has never been wider.
The teams that close this gap first will have better risk intelligence, faster ORSA processes, and fewer surprises when scenarios crystallise. That's not a regulatory advantage. It's a fundamental operating advantage.
Effi Mor is the founder of RemitRix, a scenario-based risk intelligence platform focused on Solvency II market risk, covering SCR modules, economic scenario generation, and AI-assisted portfolio stress testing for insurance companies and pension funds. Risk Intelligence Weekly publishes every Wednesday.