Key Takeaways
| # | Takeaway |
| 1 | Pension fund risk management is the structured process of identifying, assessing, treating, and monitoring all risks that could prevent the fund from meeting its obligations to current and future beneficiaries. |
| 2 | The OECD framework organizes pension fund risk management into four pillars: management oversight and culture, strategy and risk assessment, control systems, and information and reporting. |
| 3 | Pension funds face ten distinct risk categories: investment/market risk, liability/longevity risk, liquidity risk, credit/counterparty risk, operational risk, regulatory/compliance risk, governance risk, cyber/technology risk, ESG/climate risk, and model risk. |
| 4 | Asset-Liability Management (ALM) and Liability-Driven Investing (LDI) are the core analytical frameworks that link investment decisions to benefit obligations. Both require stress testing and scenario analysis. |
| 5 | Quantitative tools (Monte Carlo simulation, Value at Risk, stress testing, scenario analysis) must complement qualitative governance structures. Numbers without governance produce false confidence. |
| 6 | U.S. pension funds operate under ERISA (private sector) and state-specific statutes (public sector). Fiduciary duty is the legal anchor that makes risk management non-negotiable. |
| 7 | Boards and trustees must receive risk reports in plain language: funded-status impact, contribution-rate sensitivity, and probability of benefit reduction, not just portfolio volatility statistics. |
What Is Risk Management for Pension Funds?
Risk management for pension funds is the systematic identification, assessment, treatment, monitoring, and reporting of all risks that could impair the fund’s ability to pay promised benefits to members when those benefits fall due.
Unlike a corporate treasury or an endowment, a pension fund carries a legally binding obligation to real people: retirees who depend on the fund to meet living expenses they cannot replace from other sources.
That obligation makes pension fund risk management a fiduciary imperative, not a compliance option.
The OECD’s pension fund risk-management framework breaks the discipline into four pillars: management oversight and culture, strategy and risk assessment, control systems, and information and reporting.
ISO 31000:2018 provides the overarching risk management principles that apply universally. The Society of Actuaries (SOA) and the CFA Institute publish sector-specific guidance on investment risk, longevity risk, and ALM modeling.
This guide covers every dimension of pension fund risk management: the risk categories, the governance structures, the quantitative tools, the regulatory context, and a 90-day implementation roadmap. Each section connects to resources across riskpublishing.com so you can deepen your knowledge on any topic.
Ten Risk Categories Pension Funds Must Manage
Pension funds face a broader risk landscape than most investors. The fund must manage both asset-side risks (investments may underperform) and liability-side risks (obligations may grow faster than expected).
The table below catalogs the ten most material risk categories.
| # | Risk Category | Definition | Key Drivers | Impact on the Pension Fund |
| 1 | Investment / Market Risk | Risk that asset values decline due to adverse movements in equity markets, interest rates, credit spreads, currencies, or real estate valuations | Equity drawdowns; interest-rate changes; credit-spread widening; currency fluctuations; real-estate repricing | Reduced funded ratio; increased contribution requirements; potential benefit-level pressure |
| 2 | Liability / Longevity Risk | Risk that the present value of benefit obligations grows faster than expected, often because members live longer than actuarial assumptions predict | Mortality-improvement trends; discount-rate changes; benefit-formula modifications; early-retirement patterns | Higher-than-expected benefit payments; actuarial deficits; contribution-rate increases |
| 3 | Interest-Rate / Discount-Rate Risk | Risk that changes in the discount rate used to value liabilities cause large swings in funded status | Monetary policy shifts; bond-yield movements; accounting-standard changes | Funded-ratio volatility; mismatch between asset returns and liability growth |
| 4 | Liquidity Risk | Risk that the fund cannot meet benefit payments, margin calls, or capital commitments without forced asset sales at unfavorable prices | Illiquid asset concentrations (PE, real estate, infrastructure); derivative margin calls; member-transfer outflows; unexpected benefit spikes | Forced selling at losses; inability to meet cash obligations; reputational damage |
| 5 | Credit / Counterparty Risk | Risk of loss from a borrower, issuer, or counterparty failing to meet contractual obligations | Corporate-bond defaults; bank-counterparty failure; derivative-counterparty insolvency; sovereign-debt default | Direct investment losses; collateral shortfalls; contagion across the portfolio |
| 6 | Operational Risk | Risk of loss from inadequate or failed internal processes, people, systems, or external events | Data errors; processing failures; fraud; human error; system outages; vendor failures | Financial losses; regulatory penalties; reputational harm; benefit-payment delays |
| 7 | Regulatory / Compliance Risk | Risk that changes in pension law, tax policy, or supervisory requirements increase costs or restrict investment flexibility | ERISA amendments; state-pension-reform legislation; GASB/FASB accounting changes; fiduciary-duty interpretations | Increased contribution mandates; restricted asset allocation; enhanced reporting obligations |
| 8 | Governance Risk | Risk that the fund’s board, trustees, or management lack the skills, independence, or structures to make effective risk decisions | Trustee skill gaps; conflicts of interest; inadequate committee structures; poor delegation practices | Suboptimal investment decisions; undetected operational failures; regulatory enforcement |
| 9 | Cyber / Technology Risk | Risk that technology failures or cyber attacks disrupt operations, compromise member data, or cause financial loss | Ransomware; phishing; vendor data breaches; legacy-system failures; insider threats | Member-data exposure; benefit-payment disruption; regulatory penalties; reputational damage |
| 10 | ESG / Climate Risk | Risk that environmental, social, or governance factors erode asset values or increase liabilities | Climate transition (stranded fossil-fuel assets); physical climate damage; governance failures at investee companies; regulatory ESG mandates | Portfolio-value impairment; stranded-asset write-downs; fiduciary-duty challenges; beneficiary activism |
Each category interconnects. A geopolitical event (geopolitical risk) can trigger market volatility (investment risk), which forces asset sales (liquidity risk), which impairs funded status (liability risk), which triggers regulatory action (compliance risk).
The pension fund must assess these risks as a correlated portfolio, not as independent line items.
The OECD Four-Pillar Risk Management Framework
The OECD and the International Organisation of Pension Supervisors (IOPS) have established the global benchmark framework that pension supervisors across advanced economies reference.
The framework organizes risk management into four interdependent pillars.
| Pillar | Components | Key Requirements | Pension-Specific Considerations |
| 1. Management Oversight and Culture | Board/trustee governance structures; risk management policy; risk appetite statement; fiduciary-duty compliance; tone from the top | Board must understand the fund’s risk profile; risk management policy must be documented and approved; risk appetite must cover both asset and liability dimensions | Trustee competence is critical. Many pension boards include member-elected trustees who may lack investment or risk expertise. Training and expert advisory support are essential. |
| 2. Strategy and Risk Assessment | Asset-liability management strategy; investment policy statement; risk identification across all ten categories; risk assessment methodology | Regular (at least annual) risk assessments covering all material risk categories; scenario analysis and stress testing; integration of risk assessment into investment strategy | ALM is the defining feature of pension fund risk assessment. The assessment must evaluate risks in the context of liabilities, not assets alone. |
| 3. Control Systems | Internal controls; segregation of duties; compliance monitoring; operational-risk controls; vendor/outsourcing oversight; business continuity planning | Documented control procedures; independent compliance function; regular control testing; vendor due diligence and ongoing monitoring | Pension funds heavily outsource (investment management, custodianship, administration, actuarial services). Third-party risk management is central. |
| 4. Information and Reporting | Risk reporting to the board; regulatory reporting; member communication; actuarial reporting; investment-performance reporting | Timely, accurate, and complete risk information reaches decision-makers; reports cover funded status, investment performance, risk exposures, and emerging risks | Funded-status reporting must translate complex actuarial and investment data into decision-ready information that trustees can act on. |
Map your pension fund’s existing governance and risk processes against these four pillars. Gaps in any pillar weaken the entire framework.
Our guides on enterprise risk management frameworks and risk assessment policies provide the templates you can adapt to a pension fund context.
Asset-Liability Management (ALM) and Liability-Driven Investing (LDI)
ALM is the analytical discipline that evaluates investment decisions in the context of the fund’s liabilities. LDI is the investment strategy that flows from ALM. Together, they form the backbone of pension fund risk management.
| Concept | Definition | Purpose | Key Metrics |
| Asset-Liability Management (ALM) | The process of managing the fund’s assets and liabilities in an integrated framework to optimize the probability of meeting benefit obligations | Ensure the investment strategy is aligned with the timing, magnitude, and sensitivity of benefit obligations | Funded ratio; surplus/deficit; duration gap; tracking error vs. liabilities |
| Liability-Driven Investing (LDI) | An investment approach that constructs the portfolio around a liability-hedging component (matching bond duration and inflation sensitivity to liabilities) and a growth component (generating excess return) | Reduce funded-status volatility by hedging interest-rate and inflation sensitivity; generate return above liability growth through the growth allocation | Liability hedge ratio; interest-rate sensitivity; inflation sensitivity; surplus risk budget |
| Surplus Risk Budgeting | The process of allocating the total risk budget between the hedging portfolio and the growth portfolio, measured relative to liabilities, not a market benchmark | Ensure the fund takes only as much surplus risk as the board/trustees have approved in the risk appetite statement | Surplus VaR; surplus tracking error; probability of underfunding |
| Stress Testing and Scenario Analysis | Quantitative exercises that evaluate the impact of adverse scenarios (equity crash + rate decline, stagflation, longevity shock) on funded status, contributions, and benefits | Identify tail risks that static risk measures miss; test the resilience of the ALM strategy under extreme conditions | Funded-ratio impact per scenario; contribution-rate sensitivity; conditional shortfall |
The Society of Actuaries’ December 2025 report on Model Risk Management for Pension Funds highlights that Economic Scenario Generators (ESGs) driving ALM models introduce model risk: the possibility of adverse outcomes from incorrect model selection, inaccurate parameters, or inappropriate use.
Pension funds must govern their models with the same rigor they apply to their investments.
Our guides on Monte Carlo simulation and scenario analysis provide the quantitative foundations.
Quantitative Tools Used in Pension Fund Risk Management
| Tool | What the Tool Does | Pension Fund Application | Limitation |
| Monte Carlo Simulation | Generates thousands of random scenarios from probability distributions to produce a range of possible outcomes | Model the distribution of future funded ratios under different investment strategies; estimate the probability of underfunding at various horizons | Results depend on input assumptions (return distributions, correlations); model risk if assumptions are wrong |
| Value at Risk (VaR) / Conditional VaR | Estimates the maximum loss at a given confidence level over a defined time horizon | Quantify portfolio drawdown risk; set risk limits on total portfolio and sub-portfolio levels | VaR says nothing about losses beyond the confidence threshold; CVaR (Expected Shortfall) addresses this gap |
| Liability-Relative Risk Measures | Measure portfolio risk relative to liability movements (surplus tracking error, surplus VaR) rather than absolute market risk | Assess the risk of the funded ratio deteriorating; calibrate the hedge ratio and growth allocation | Requires accurate liability modeling and discount-rate assumptions |
| Stress Testing | Applies specific adverse scenarios (e.g., “2008 replay,” “stagflation,” “pandemic + rate collapse”) to the current portfolio and liability structure | Evaluate the funded-ratio impact, contribution-rate sensitivity, and liquidity implications of extreme events | Scenarios are selected, not exhaustive; stress tests do not assign probabilities |
| Sensitivity / Tornado Analysis | Measures the funded-ratio impact of a single-variable change (e.g., +/–100bps in discount rate, +/– 2 years in life expectancy) | Identify the risk factors to which the funded ratio is most sensitive; prioritize hedging and mitigation efforts | Single-variable analysis ignores correlations between risk factors |
| Cash-Flow Projection | Projects benefit payments, contributions, and investment income over multi-decade horizons under different scenarios | Assess liquidity needs over time; identify periods of negative cash flow; calibrate the illiquid-asset allocation | Long-horizon projections compound estimation errors; requires regular updating |
No single tool captures the full picture. Best practice combines several tools: Monte Carlo simulation to model probability distributions, stress testing to explore tail events, sensitivity analysis to identify the biggest risk drivers, and cash-flow projection to manage liquidity.
Report the results in terms the board understands: funded-ratio impact, contribution-rate changes, and probability of benefit reduction, not abstract portfolio-volatility numbers. See our guide on risk quantification for boards.
Regulatory Context: ERISA, State Statutes, and Fiduciary Duty
U.S. pension funds operate under two distinct regulatory regimes depending on the type of fund.
| Dimension | Private-Sector Plans (ERISA) | Public-Sector Plans (State/Municipal) |
| Governing Law | Employee Retirement Income Security Act of 1974 (ERISA), as amended | State-specific pension codes and constitutional protections; no single federal statute |
| Regulator | U.S. Department of Labor (DOL); Pension Benefit Guaranty Corporation (PBGC) | State pension boards; state comptrollers; state legislatures |
| Fiduciary Standard | ERISA §404: prudent-person rule; exclusive-benefit rule; diversification requirement; plan-document compliance | Varies by state; generally prudent-investor standard; many states incorporate UPIA (Uniform Prudent Investor Act) |
| Funding Requirements | ERISA minimum-funding standards; PBGC premium obligations; IRS funding rules | State-specific actuarial funding policies; no PBGC backstop; funded ratios vary widely |
| Investment Restrictions | Broad prudent-person flexibility; prohibited-transaction rules limit self-dealing | Varies by state; some restrict asset classes (e.g., limits on alternative investments or ESG mandates) |
| Reporting | Form 5500 annual filing; actuarial certification; PBGC premium filing; participant disclosures | GASB 67/68 reporting; state-specific annual reports; actuarial valuations; public transparency mandates |
| Risk Management Requirement | ERISA does not mandate a specific risk management framework but fiduciary duty implicitly requires prudent risk oversight | Varies; some states mandate formal risk management policies (e.g., California, New York); many rely on fiduciary-duty principles |
| Recent Developments | DOL guidance on ESG considerations in plan investments (2022); SECURE 2.0 Act provisions on retirement plan participation and portability | State-level pension-reform efforts; funded-ratio disclosure mandates; growing ESG-investment debates in state legislatures |
Regardless of regulatory regime, the fiduciary standard is the legal anchor. Trustees and plan administrators must act in the exclusive interest of participants and beneficiaries.
A documented, well-governed risk management program is the strongest evidence of fiduciary compliance. See our compliance risk assessment guide to build the compliance dimension of your pension fund risk program.
Governance: Who Owns Pension Fund Risk Management?
Pension fund governance adapts the IIA Three Lines Model to the pension context. The table below maps roles to responsibilities.
| Line | Role | Risk Management Responsibility |
| Governing Body | Board of Trustees / Pension Board | Set risk appetite; approve the investment policy statement and risk management policy; review the funded-status and risk reports; challenge management assumptions; ensure fiduciary compliance |
| First Line | Executive Director / CIO / Fund Managers / Operations | Execute the investment strategy within approved risk parameters; manage day-to-day operations; implement controls; report performance, risk, and incidents to the board |
| Second Line | Chief Risk Officer / Risk Manager / Compliance / Actuary | Design the risk management framework and methodology; conduct risk assessments; monitor risk limits and KRIs; produce risk reports; challenge first-line decisions; coordinate actuarial analysis |
| Third Line | Internal Audit (or outsourced audit function) | Independently assure that governance, controls, and risk management processes are effective; report to the Audit Committee |
| External Advisors | Investment Consultant / Actuary / Legal Counsel / External Auditor | Provide independent expert advice on investment strategy, actuarial assumptions, legal compliance, and financial reporting; supplement internal capability |
Many pension boards include elected member representatives who may not have investment or risk backgrounds.
Training programs, expert advisory panels, and clear, jargon-free risk reporting are essential to bridge the knowledge gap. Our Three Lines Model guide provides the governance framework you can adapt.
Key Risk Indicators (KRIs) for Pension Fund Monitoring
| KRI | Risk Category | Measurement | Tolerance Example | Escalation Trigger |
| Funded ratio (actuarial basis) | Liability / Funding | Total assets ÷ present value of benefit obligations | ≥ 80% | Ratio < 75% → Board emergency session; contribution review |
| Surplus risk (surplus VaR / surplus TE) | Investment / Market | 1-year 95% surplus VaR as % of liabilities | ≤ 10% of liabilities | Surplus VaR > 12% → CIO/CRO review; rebalance discussion |
| Duration mismatch (asset vs. liability) | Interest Rate | Difference between asset duration and liability duration | ≤ 2 years | Gap > 3 years → LDI hedge-ratio review |
| Liquidity coverage ratio | Liquidity | Liquid assets ÷ projected 12-month benefit payments + margin calls | ≥ 120% | Ratio < 110% → liquidity-contingency plan activation |
| Illiquid-asset allocation | Liquidity | Private equity + real estate + infrastructure + other illiquids as % of total assets | ≤ Board-approved maximum (e.g., 30%) | Allocation > limit → commitment-pacing review; no new commitments |
| Active-risk budget utilization | Investment | Actual tracking error vs. benchmark ÷ approved tracking-error budget | ≤ 100% of budget | Utilization > 110% → CIO review; manager rebalancing |
| Counterparty exposure concentration | Credit | Single-counterparty exposure as % of total assets | ≤ 5% per counterparty | Any single exposure > 5% → immediate reduction plan |
| Longevity-assumption variance | Liability / Longevity | Actual mortality experience vs. assumed mortality table | Variance within +/– 0.5 year of life expectancy assumption | Variance > 1 year → actuarial assumption review; contribution-impact analysis |
| Operational-incident count | Operational | Number of operational incidents (errors, system failures, processing delays) per quarter | Declining trend; zero high-severity incidents | Any high-severity incident → immediate root-cause analysis and board notification |
| Cyber-vulnerability count (critical, unpatched > 30 days) | Cyber / Technology | Count of unpatched critical CVEs in fund systems beyond 30 days | ≤ 2 | Count > 2 → CISO escalation; > 5 → Board notification |
Configure these KRIs in a KRI dashboard with automated data feeds from the investment platform, custodian, and IT-security systems.
Report KRI status to the Board at every meeting alongside funded-status and investment-performance updates.
ESG and Climate Risk: The New Frontier in Pension Fund Risk Management
Pension funds are among the largest and longest-duration investors in the global economy.
A fund with a 30-year liability horizon cannot afford to ignore risks that materialize over decades: climate transition, physical climate damage, governance failures at portfolio companies, and social-license erosion.
Regulators including the SEC, ISSB, and the EU CSRD increasingly expect institutional investors, including pension funds, to assess and disclose climate-related financial risks.
| ESG Risk Dimension | Pension Fund Impact | Assessment Approach | Mitigation Strategy |
| Climate Transition Risk | Fossil-fuel and carbon-intensive assets face repricing as economies decarbonize; stranded-asset write-downs reduce portfolio value | Carbon-footprint analysis; TCFD scenario analysis (1.5°C, 2°C, 3°C pathways); transition-risk stress testing on the equity and credit portfolios | Reduce exposure to high-carbon sectors; allocate to clean-energy and transition assets; engage with investee companies on transition plans |
| Physical Climate Risk | Extreme weather events damage real-estate holdings, infrastructure investments, and supply chains of portfolio companies | Climate-vulnerability mapping of real-asset holdings; physical-risk scenario analysis; insurance-coverage review | Divest from highly exposed assets; require climate-resilience standards in real-estate and infrastructure mandates; purchase insurance |
| Governance Risk at Investee Companies | Poor governance at portfolio companies leads to value destruction (fraud, excessive executive pay, board ineffectiveness) | Proxy-voting analysis; governance-scorecard monitoring; engagement tracking | Active ownership: vote proxies in line with governance best practices; engage with boards on improvement; escalate to divestment |
| Social Risk / Human Capital | Labor-rights violations, health-and-safety failures, and diversity deficits at portfolio companies create legal and reputational exposure | Human-capital KRI monitoring; controversy screening; UN Global Compact compliance tracking | Engage investee companies on labor standards; integrate social-risk scores into manager-selection criteria |
| Regulatory ESG Mandates | Increasing state-level legislation on ESG integration (some mandating, some restricting); GASB and SEC disclosure expectations | Regulatory-change monitoring; legal-compliance review; fiduciary-duty analysis of ESG integration | Document fiduciary rationale; maintain compliance with applicable mandates; adapt investment-policy language to the regulatory environment |
Our ESG key risk indicators framework provides 43 ESG KRIs mapped to SEC, ISSB, CSRD, and GRI standards that pension funds can adopt directly.
Eight Pitfalls in Pension Fund Risk Management
| # | Pitfall | Consequence | Fix |
| 1 | Managing assets in isolation from liabilities | Funded-status volatility blindsides the board; contributions spike during market downturns | Adopt an ALM / LDI framework that evaluates investment decisions relative to liability sensitivity |
| 2 | Relying on backward-looking risk measures (historic tracking error) | Risk assessment reflects the past, not the current portfolio or future scenarios | Use forward-looking measures: surplus VaR, stress testing, scenario analysis on the current portfolio |
| 3 | Trustee skill gaps in risk and investment | Board approves strategies the board does not fully understand; governance risk materializes | Mandatory trustee training; independent expert advisors; plain-language risk reporting |
| 4 | Excessive illiquid-asset allocation without liquidity planning | Fund cannot meet benefit payments or margin calls without forced sales | Set a Board-approved illiquid-asset ceiling; maintain a liquidity buffer; model cash-flow projections under stress |
| 5 | No formal risk appetite or tolerance statement | No benchmark against which to evaluate risks; risk-taking is implicit, not governed | Draft a Board-approved risk appetite statement covering funded-ratio floor, surplus-risk budget, liquidity minimums, and concentration limits |
| 6 | Ignoring operational and cyber risk | Data breach compromises member records; processing error delays benefit payments; fund suffers regulatory sanction | Extend the risk management framework beyond investment risk; include operational risk assessments, cyber controls, and vendor oversight |
| 7 | Treating actuarial assumptions as certainties | Longevity improvements or discount-rate changes create unfunded liabilities that the board did not anticipate | Run sensitivity analysis on key actuarial assumptions (mortality, discount rate, salary growth, retirement age); stress-test funded status under assumption changes |
| 8 | No integration between the pension fund risk program and the sponsor’s enterprise risk program | Pension-fund risk exposures do not appear on the corporate risk dashboard; sponsor is blindsided by contribution calls | Integrate pension fund risk reporting into the sponsor’s enterprise risk register and board reporting cycle |
Building a Pension Fund Risk Management Program
| Phase | Timeline | Actions | Owner | Deliverable |
| Phase 1: Governance & Policy | Days 1–30 | Assess current governance against the OECD four-pillar framework; draft or refresh the risk management policy; define risk appetite (funded-ratio floor, surplus-risk budget, liquidity minimum, concentration limits); map roles using the Three Lines Model; schedule trustee risk-management training | Board Chair / CRO / Executive Director | Gap assessment report; draft risk management policy; risk appetite statement; RACI matrix; training plan |
| Phase 2: Risk Assessment & ALM | Days 31–60 | Conduct a comprehensive risk assessment across all ten risk categories; run ALM analysis (surplus VaR, duration gap, cash-flow projection); perform stress testing on three priority scenarios (equity crash + rate decline, stagflation, longevity shock); identify risks above tolerance | CRO / CIO / Actuary | Scored pension fund risk register; ALM report; stress-test results; prioritized treatment list |
| Phase 3: Controls & Monitoring | Days 61–75 | Develop treatment plans per priority risk; implement or strengthen controls (LDI hedge-ratio adjustment, liquidity buffer, operational controls, cyber controls, vendor oversight); configure KRI dashboards with automated feeds | CRO / CIO / Operations / IT | Risk treatment plans; updated control register; live KRI dashboard |
| Phase 4: Reporting & Embedding | Days 76–90 | Produce the first integrated risk report to the Board (funded-status impact, KRI status, stress-test outcomes, treatment progress); integrate pension fund risks into the sponsor’s enterprise dashboard (if applicable); schedule quarterly reassessment and annual full review | CRO / Board of Trustees | First Board risk report; integrated enterprise dashboard; quarterly and annual review calendar |
The Future of Pension Fund Risk Management
AI-Powered ALM and Scenario Modeling. Machine learning models are improving the accuracy and speed of ALM projections, enabling real-time funded-status monitoring and dynamic hedge-ratio adjustment.
The SOA’s 2025 report on model risk management highlights that AI-generated Economic Scenario Generators must be governed with formal validation, back-testing, and human-oversight protocols. See our guide on AI risk assessment frameworks.
Climate Stress Testing as Standard Practice. TCFD-aligned scenario analysis (1.5°C, 2°C, 3°C pathways) is becoming a standard component of pension fund risk assessment.
The Network for Greening the Financial System (NGFS) provides open-source climate scenarios that pension funds can integrate into their ALM models. Our ESG KRI framework maps the indicators to monitor.
Operational Resilience Regulation. The EU’s Digital Operational Resilience Act (DORA) already applies to pension funds in Europe. While the U.S. has no direct equivalent, the trend toward operational-resilience mandates is spreading.
Pension funds should proactively build business continuity and disaster recovery capability rather than waiting to be regulated into doing so.
Decumulation Risk Management. As large defined-benefit plans mature and shift from accumulation (asset growth) to decumulation (net benefit outflows), liquidity management, cash-flow planning, and de-risking glide paths become the dominant risk management challenges.
Funds must model the transition from growth-oriented portfolios to income-generating, liability-matching portfolios with the same rigor they applied to asset accumulation.
Strengthen Your Pension Fund Risk Management Program Today
You now have the ten risk categories, the OECD four-pillar framework, ALM/LDI fundamentals, quantitative tools, KRIs, and a 90-day roadmap. Use these riskpublishing.com resources: Enterprise Risk Management Framework • Risk Assessment Policy • Risk Register Template • Risk Assessment Matrix • Risk Appetite vs. Risk Tolerance.
More guides: Monte Carlo Simulation • Scenario Analysis • Risk Quantification for Boards • Three Lines Model • KRI Dashboard Guide • Third-Party Risk Management • Business Continuity Plan • Operational Resilience • Geopolitical Risk • Shadow AI Risk Management.
Frequently Asked Questions
What is the biggest risk facing pension funds?
Investment/market risk and liability/longevity risk are the two largest risk categories by funded-status impact.
A simultaneous equity drawdown and interest-rate decline (the “perfect storm” seen in 2001–2003 and 2007–2009) can reduce funded ratios by 15–25 percentage points. Longevity improvements of just one additional year of life expectancy can increase liabilities by 3–5%. ALM and LDI frameworks address both dimensions.
Are U.S. public pension funds required to have a risk management program?
No single federal statute mandates a specific risk management framework the way ERISA governs private plans. However, fiduciary duty under state law implicitly requires prudent risk oversight.
Several states (California, New York, Ohio) have enacted legislation or board policies mandating formal risk management. Regardless of legal mandate, a documented risk program is best practice and the strongest defense of fiduciary compliance.
How does ALM differ from traditional asset allocation?
Traditional asset allocation uses an asset-only framework where cash is the risk-free reference point. ALM uses a liability-relative framework where the fund’s benefit obligations are the reference point.
Under ALM, a 100% equity portfolio might be “high risk” not because equity is volatile, but because equity duration does not match liability duration. ALM reveals the mismatch risk that asset-only frameworks hide. See our Monte Carlo simulation guide to understand how to model liability-relative outcomes.
How often should pension fund risks be assessed?
Formally at least annually, aligned with the actuarial valuation cycle. High-rated risks (investment, liquidity, interest rate) should be monitored continuously through KRI dashboards. Trigger ad-hoc reassessments after major market events, regulatory changes, significant membership changes (e.g., early-retirement windows), or governance transitions.
Should pension funds use FAIR to quantify risk?
FAIR is most directly applicable to the fund’s cyber and operational risk categories, translating those risks into dollar-denominated loss estimates. The investment and liability risk categories typically use ALM-specific quantitative tools (surplus VaR, stress testing, Monte Carlo simulation) rather than FAIR.
However, the principle of financial quantification applies universally: every risk the board reviews should be expressed in terms of funded-ratio impact, contribution-rate sensitivity, or dollar exposure, not just qualitative labels.
References
1. OECD – Pension Funds’ Risk-Management Framework (Working Paper No. 40)
2. ISO 31000:2018 – Risk Management Guidelines
3. COSO ERM – Integrating with Strategy and Performance (2017)
4. IIA Three Lines Model (2020)
5. SOA – Model Risk Management for Pension Funds (December 2025)
6. IMF – Pension Funds and Financial Stability (2025)
7. CFA Institute – Investment Risk Management Resources
8. U.S. Department of Labor – ERISA Fiduciary Responsibilities
9. GASB 67/68 – Financial Reporting for Pension Plans
10. PBGC – Pension Benefit Guaranty Corporation
11. NCPERS – National Conference on Public Employee Retirement Systems
12. NGFS – Network for Greening the Financial System
13. SEC Climate-Related Disclosures
14. IFRS / ISSB Sustainability Standards
15. EU CSRD
16. EU DORA – Digital Operational Resilience Act
17. NIST Cybersecurity Framework 2.0
18. IRM – Institute of Risk Management

Chris Ekai is a Risk Management expert with over 10 years of experience in the field. He has a Master’s(MSc) degree in Risk Management from University of Portsmouth and is a CPA and Finance professional. He currently works as a Content Manager at Risk Publishing, writing about Enterprise Risk Management, Business Continuity Management and Project Management.
