80
composite AI disruption score, AU edition
How AI is reshaping risk for Australian specialty insurers
Reading the force behind the risks you already carry.
For Australian specialty insurers, MGAs, underwriting agencies and Lloyd's coverholders, AI is not a new entry on the risk register. It is the largest single driver of the risks already there, and it arrives from three outside systems the firm does not control: the regulator, the reinsurer, and the broker network.
TL;DR
- AI is not a new risk on a specialty insurer's register. It is the largest single driver of the risks already there.
- Drova's AI Disruption Index, Australian specialty insurer edition, scores the sector at a composite 80 out of 100 across three AI-driven forces.
- The three forces come from outside the firm: regulatory expectations under CPS 230 and the Financial Accountability Regime (93/100), reinsurers repricing capacity through AI catastrophe models (87/100), and broker networks scoring panels on data the firm never sees (78/100).
- Lean specialty teams carry the same obligations as a large composite, so the gap tends to be evidencing the risk rather than understanding it.
- The same forces also create advantage, not only exposure, which is why the Index scores both.
AI is reshaping the risks already on a specialty insurer's register
AI disruption risk is the degree to which AI now drives the risks a specialty insurer already carries, rather than adding a new one. It arrives from three outside systems: the regulator, the reinsurer, and the broker network.
$48m
gross written premium in the worked example
3
external forces reshaping the register
Lean teams
Why are lean specialty teams most exposed?
Specialty insurers, MGAs and coverholders typically run risk and compliance through a small team, often one person, or the CEO or CFO carrying it alongside other roles. The obligations are the same as a large composite's, but the bench is not.
That is why the gap tends to be an evidencing gap rather than an awareness one. The risk is understood, but the risk register, the accountable-person map, and the current view of controls are hard to keep up to date by hand as the pace of AI-driven change rises.
Threat or opportunity
Is AI a threat or an opportunity for specialty insurers?
Both, and that is the point. The same AI forces that raise a regulatory or operational exposure also reprice capacity and reshape distribution, so the risk shows up on the P&L as well as the risk register.
The practical starting point is to see how much of each risk on the register is now AI-driven, and where the same forces create an advantage rather than an exposure. Drova's free AI Disruption Index, Australian specialty insurer edition, scores the sector's AI-driven risks and opportunities against the objectives a board already owns.
Australian regulators
What do Australian regulators expect on AI risk?
APRA's Prudential Standard CPS 230 has been in force since 1 July 2025, and the Financial Accountability Regime has applied to insurers since March 2025, atop existing ASIC and AFSL obligations. Together they expect a controlled, evidenced operation with a named accountable person for each material risk area, including the technology and model risk that AI-augmented inputs now introduce.
See how CPS 230 and the FAR turn AI inputs into a model-risk exposure, and the APRA CPS 230 and Financial Accountability Regime solution pages.
The three forces reshaping the register
Regulatory expectations: CPS 230 and the FAR (93/100)
APRA's CPS 230 and the Financial Accountability Regime expect AI-augmented inputs to be inventoried, validated, and owned by a named person. See the full risk.
Reinsurance capacity repricing (87/100)
Reinsurers reprice capacity with AI-driven catastrophe models that move faster than a treaty renews, on assumptions the ceding insurer cannot see. See the full risk.
Broker-network distribution (78/100)
Broker networks score panels on analytics the insurer never sees, and the first sign of a problem is usually a quiet decline in new business. See the full risk.
Where to start
Where should a specialty insurer board start?
The practical starting point is to see how much of each risk on the register is now AI-driven, decide who is accountable for each, and put it on the next board agenda. None of that requires a new platform or a big budget. It requires a clear picture and an owner.
Drova publishes a free AI Disruption Index, Australian specialty insurer edition, that scores the sector's AI-driven risks and opportunities against the objectives a board already owns, with a worked example built around an anonymised $48m gross written premium specialty firm. Platforms like Drova's RunSafe, an objective-led risk and controls layer, help keep those risks on the register and evidenced as the work happens.
FAQs
AI risk FAQs
Does CPS 230 apply to MGAs and Lloyd's coverholders?
Often indirectly. An APRA-regulated capacity provider must assess and monitor its material service providers under CPS 230, which draws MGAs, underwriting agencies and coverholders into the standard through the binder relationship, even where they are not directly APRA-regulated.
Is AI disruption risk a compliance problem or a commercial one?
Both, and that is the point. The same AI forces that raise a regulatory or operational exposure also reprice capacity and reshape distribution, so the risk shows up on the P&L as well as the risk register.
Where can I see the specialty-insurer risks scored?
Drova's free AI Disruption Index, Australian specialty insurer edition, sets out the sector's top AI-driven risks and opportunities against the objectives a board already owns.
The free AI Disruption Index, Australian specialty insurer edition, scores the AI-driven risks and opportunities reshaping the sector.
Get the full picture
Related reading
Explore related topics
Drova for insurance
How Drova supports Australian specialty insurers, MGAs and coverholders.
Risk register
Build and keep current the register the Index scores against.
APRA CPS 230
Operational risk management expectations that reach AI inputs.
RunSafe risk and controls
The risk and controls layer the Index sits inside.
Objective-led GRC
Reading risk from your objectives down.
AI-powered GRC
How AI agents support governance, risk, and compliance.
