Key Takeaways

#Takeaway
1Pension fund risk management is the structured process of identifying, assessing, treating, and monitoring all risks that could prevent the fund from meeting its obligations to current and future beneficiaries.
2The OECD framework organizes pension fund risk management into four pillars: management oversight and culture, strategy and risk assessment, control systems, and information and reporting.
3Pension funds face ten distinct risk categories: investment/market risk, liability/longevity risk, liquidity risk, credit/counterparty risk, operational risk, regulatory/compliance risk, governance risk, cyber/technology risk, ESG/climate risk, and model risk.
4Asset-Liability Management (ALM) and Liability-Driven Investing (LDI) are the core analytical frameworks that link investment decisions to benefit obligations. Both require stress testing and scenario analysis.
5Quantitative tools (Monte Carlo simulation, Value at Risk, stress testing, scenario analysis) must complement qualitative governance structures. Numbers without governance produce false confidence.
6U.S. pension funds operate under ERISA (private sector) and state-specific statutes (public sector). Fiduciary duty is the legal anchor that makes risk management non-negotiable.
7Boards and trustees must receive risk reports in plain language: funded-status impact, contribution-rate sensitivity, and probability of benefit reduction, not just portfolio volatility statistics.

What Is Risk Management for Pension Funds?

Risk management for pension funds is the systematic identification, assessment, treatment, monitoring, and reporting of all risks that could impair the fund’s ability to pay promised benefits to members when those benefits fall due.

Unlike a corporate treasury or an endowment, a pension fund carries a legally binding obligation to real people: retirees who depend on the fund to meet living expenses they cannot replace from other sources.

That obligation makes pension fund risk management a fiduciary imperative, not a compliance option.

The OECD’s pension fund risk-management framework breaks the discipline into four pillars: management oversight and culture, strategy and risk assessment, control systems, and information and reporting.

 ISO 31000:2018 provides the overarching risk management principles that apply universally. The Society of Actuaries (SOA) and the CFA Institute publish sector-specific guidance on investment risk, longevity risk, and ALM modeling.

This guide covers every dimension of pension fund risk management: the risk categories, the governance structures, the quantitative tools, the regulatory context, and a 90-day implementation roadmap. Each section connects to resources across riskpublishing.com so you can deepen your knowledge on any topic.

Ten Risk Categories Pension Funds Must Manage

Pension funds face a broader risk landscape than most investors. The fund must manage both asset-side risks (investments may underperform) and liability-side risks (obligations may grow faster than expected).

The table below catalogs the ten most material risk categories.

#Risk CategoryDefinitionKey DriversImpact on the Pension Fund
1Investment / Market RiskRisk that asset values decline due to adverse movements in equity markets, interest rates, credit spreads, currencies, or real estate valuationsEquity drawdowns; interest-rate changes; credit-spread widening; currency fluctuations; real-estate repricingReduced funded ratio; increased contribution requirements; potential benefit-level pressure
2Liability / Longevity RiskRisk that the present value of benefit obligations grows faster than expected, often because members live longer than actuarial assumptions predictMortality-improvement trends; discount-rate changes; benefit-formula modifications; early-retirement patternsHigher-than-expected benefit payments; actuarial deficits; contribution-rate increases
3Interest-Rate / Discount-Rate RiskRisk that changes in the discount rate used to value liabilities cause large swings in funded statusMonetary policy shifts; bond-yield movements; accounting-standard changesFunded-ratio volatility; mismatch between asset returns and liability growth
4Liquidity RiskRisk that the fund cannot meet benefit payments, margin calls, or capital commitments without forced asset sales at unfavorable pricesIlliquid asset concentrations (PE, real estate, infrastructure); derivative margin calls; member-transfer outflows; unexpected benefit spikesForced selling at losses; inability to meet cash obligations; reputational damage
5Credit / Counterparty RiskRisk of loss from a borrower, issuer, or counterparty failing to meet contractual obligationsCorporate-bond defaults; bank-counterparty failure; derivative-counterparty insolvency; sovereign-debt defaultDirect investment losses; collateral shortfalls; contagion across the portfolio
6Operational RiskRisk of loss from inadequate or failed internal processes, people, systems, or external eventsData errors; processing failures; fraud; human error; system outages; vendor failuresFinancial losses; regulatory penalties; reputational harm; benefit-payment delays
7Regulatory / Compliance RiskRisk that changes in pension law, tax policy, or supervisory requirements increase costs or restrict investment flexibilityERISA amendments; state-pension-reform legislation; GASB/FASB accounting changes; fiduciary-duty interpretationsIncreased contribution mandates; restricted asset allocation; enhanced reporting obligations
8Governance RiskRisk that the fund’s board, trustees, or management lack the skills, independence, or structures to make effective risk decisionsTrustee skill gaps; conflicts of interest; inadequate committee structures; poor delegation practicesSuboptimal investment decisions; undetected operational failures; regulatory enforcement
9Cyber / Technology RiskRisk that technology failures or cyber attacks disrupt operations, compromise member data, or cause financial lossRansomware; phishing; vendor data breaches; legacy-system failures; insider threatsMember-data exposure; benefit-payment disruption; regulatory penalties; reputational damage
10ESG / Climate RiskRisk that environmental, social, or governance factors erode asset values or increase liabilitiesClimate transition (stranded fossil-fuel assets); physical climate damage; governance failures at investee companies; regulatory ESG mandatesPortfolio-value impairment; stranded-asset write-downs; fiduciary-duty challenges; beneficiary activism

Each category interconnects. A geopolitical event (geopolitical risk) can trigger market volatility (investment risk), which forces asset sales (liquidity risk), which impairs funded status (liability risk), which triggers regulatory action (compliance risk).

The pension fund must assess these risks as a correlated portfolio, not as independent line items.

The OECD Four-Pillar Risk Management Framework

The OECD and the International Organisation of Pension Supervisors (IOPS) have established the global benchmark framework that pension supervisors across advanced economies reference.

The framework organizes risk management into four interdependent pillars.

PillarComponentsKey RequirementsPension-Specific Considerations
1. Management Oversight and CultureBoard/trustee governance structures; risk management policy; risk appetite statement; fiduciary-duty compliance; tone from the topBoard must understand the fund’s risk profile; risk management policy must be documented and approved; risk appetite must cover both asset and liability dimensionsTrustee competence is critical. Many pension boards include member-elected trustees who may lack investment or risk expertise. Training and expert advisory support are essential.
2. Strategy and Risk AssessmentAsset-liability management strategy; investment policy statement; risk identification across all ten categories; risk assessment methodologyRegular (at least annual) risk assessments covering all material risk categories; scenario analysis and stress testing; integration of risk assessment into investment strategyALM is the defining feature of pension fund risk assessment. The assessment must evaluate risks in the context of liabilities, not assets alone.
3. Control SystemsInternal controls; segregation of duties; compliance monitoring; operational-risk controls; vendor/outsourcing oversight; business continuity planningDocumented control procedures; independent compliance function; regular control testing; vendor due diligence and ongoing monitoringPension funds heavily outsource (investment management, custodianship, administration, actuarial services). Third-party risk management is central.
4. Information and ReportingRisk reporting to the board; regulatory reporting; member communication; actuarial reporting; investment-performance reportingTimely, accurate, and complete risk information reaches decision-makers; reports cover funded status, investment performance, risk exposures, and emerging risksFunded-status reporting must translate complex actuarial and investment data into decision-ready information that trustees can act on.

Map your pension fund’s existing governance and risk processes against these four pillars. Gaps in any pillar weaken the entire framework.

Our guides on enterprise risk management frameworks and risk assessment policies provide the templates you can adapt to a pension fund context.

Asset-Liability Management (ALM) and Liability-Driven Investing (LDI)

ALM is the analytical discipline that evaluates investment decisions in the context of the fund’s liabilities. LDI is the investment strategy that flows from ALM. Together, they form the backbone of pension fund risk management.

ConceptDefinitionPurposeKey Metrics
Asset-Liability Management (ALM)The process of managing the fund’s assets and liabilities in an integrated framework to optimize the probability of meeting benefit obligationsEnsure the investment strategy is aligned with the timing, magnitude, and sensitivity of benefit obligationsFunded ratio; surplus/deficit; duration gap; tracking error vs. liabilities
Liability-Driven Investing (LDI)An investment approach that constructs the portfolio around a liability-hedging component (matching bond duration and inflation sensitivity to liabilities) and a growth component (generating excess return)Reduce funded-status volatility by hedging interest-rate and inflation sensitivity; generate return above liability growth through the growth allocationLiability hedge ratio; interest-rate sensitivity; inflation sensitivity; surplus risk budget
Surplus Risk BudgetingThe process of allocating the total risk budget between the hedging portfolio and the growth portfolio, measured relative to liabilities, not a market benchmarkEnsure the fund takes only as much surplus risk as the board/trustees have approved in the risk appetite statementSurplus VaR; surplus tracking error; probability of underfunding
Stress Testing and Scenario AnalysisQuantitative exercises that evaluate the impact of adverse scenarios (equity crash + rate decline, stagflation, longevity shock) on funded status, contributions, and benefitsIdentify tail risks that static risk measures miss; test the resilience of the ALM strategy under extreme conditionsFunded-ratio impact per scenario; contribution-rate sensitivity; conditional shortfall

The Society of Actuaries’ December 2025 report on Model Risk Management for Pension Funds highlights that Economic Scenario Generators (ESGs) driving ALM models introduce model risk: the possibility of adverse outcomes from incorrect model selection, inaccurate parameters, or inappropriate use.

Pension funds must govern their models with the same rigor they apply to their investments.

Our guides on Monte Carlo simulation and scenario analysis provide the quantitative foundations.

Quantitative Tools Used in Pension Fund Risk Management

ToolWhat the Tool DoesPension Fund ApplicationLimitation
Monte Carlo SimulationGenerates thousands of random scenarios from probability distributions to produce a range of possible outcomesModel the distribution of future funded ratios under different investment strategies; estimate the probability of underfunding at various horizonsResults depend on input assumptions (return distributions, correlations); model risk if assumptions are wrong
Value at Risk (VaR) / Conditional VaREstimates the maximum loss at a given confidence level over a defined time horizonQuantify portfolio drawdown risk; set risk limits on total portfolio and sub-portfolio levelsVaR says nothing about losses beyond the confidence threshold; CVaR (Expected Shortfall) addresses this gap
Liability-Relative Risk MeasuresMeasure portfolio risk relative to liability movements (surplus tracking error, surplus VaR) rather than absolute market riskAssess the risk of the funded ratio deteriorating; calibrate the hedge ratio and growth allocationRequires accurate liability modeling and discount-rate assumptions
Stress TestingApplies specific adverse scenarios (e.g., “2008 replay,” “stagflation,” “pandemic + rate collapse”) to the current portfolio and liability structureEvaluate the funded-ratio impact, contribution-rate sensitivity, and liquidity implications of extreme eventsScenarios are selected, not exhaustive; stress tests do not assign probabilities
Sensitivity / Tornado AnalysisMeasures the funded-ratio impact of a single-variable change (e.g., +/–100bps in discount rate, +/– 2 years in life expectancy)Identify the risk factors to which the funded ratio is most sensitive; prioritize hedging and mitigation effortsSingle-variable analysis ignores correlations between risk factors
Cash-Flow ProjectionProjects benefit payments, contributions, and investment income over multi-decade horizons under different scenariosAssess liquidity needs over time; identify periods of negative cash flow; calibrate the illiquid-asset allocationLong-horizon projections compound estimation errors; requires regular updating

No single tool captures the full picture. Best practice combines several tools: Monte Carlo simulation to model probability distributions, stress testing to explore tail events, sensitivity analysis to identify the biggest risk drivers, and cash-flow projection to manage liquidity.

Report the results in terms the board understands: funded-ratio impact, contribution-rate changes, and probability of benefit reduction, not abstract portfolio-volatility numbers. See our guide on risk quantification for boards.

Regulatory Context: ERISA, State Statutes, and Fiduciary Duty

U.S. pension funds operate under two distinct regulatory regimes depending on the type of fund.

DimensionPrivate-Sector Plans (ERISA)Public-Sector Plans (State/Municipal)
Governing LawEmployee Retirement Income Security Act of 1974 (ERISA), as amendedState-specific pension codes and constitutional protections; no single federal statute
RegulatorU.S. Department of Labor (DOL); Pension Benefit Guaranty Corporation (PBGC)State pension boards; state comptrollers; state legislatures
Fiduciary StandardERISA §404: prudent-person rule; exclusive-benefit rule; diversification requirement; plan-document complianceVaries by state; generally prudent-investor standard; many states incorporate UPIA (Uniform Prudent Investor Act)
Funding RequirementsERISA minimum-funding standards; PBGC premium obligations; IRS funding rulesState-specific actuarial funding policies; no PBGC backstop; funded ratios vary widely
Investment RestrictionsBroad prudent-person flexibility; prohibited-transaction rules limit self-dealingVaries by state; some restrict asset classes (e.g., limits on alternative investments or ESG mandates)
ReportingForm 5500 annual filing; actuarial certification; PBGC premium filing; participant disclosuresGASB 67/68 reporting; state-specific annual reports; actuarial valuations; public transparency mandates
Risk Management RequirementERISA does not mandate a specific risk management framework but fiduciary duty implicitly requires prudent risk oversightVaries; some states mandate formal risk management policies (e.g., California, New York); many rely on fiduciary-duty principles
Recent DevelopmentsDOL guidance on ESG considerations in plan investments (2022); SECURE 2.0 Act provisions on retirement plan participation and portabilityState-level pension-reform efforts; funded-ratio disclosure mandates; growing ESG-investment debates in state legislatures

Regardless of regulatory regime, the fiduciary standard is the legal anchor. Trustees and plan administrators must act in the exclusive interest of participants and beneficiaries.

A documented, well-governed risk management program is the strongest evidence of fiduciary compliance. See our compliance risk assessment guide to build the compliance dimension of your pension fund risk program.

Governance: Who Owns Pension Fund Risk Management?

Pension fund governance adapts the IIA Three Lines Model to the pension context. The table below maps roles to responsibilities.

LineRoleRisk Management Responsibility
Governing BodyBoard of Trustees / Pension BoardSet risk appetite; approve the investment policy statement and risk management policy; review the funded-status and risk reports; challenge management assumptions; ensure fiduciary compliance
First LineExecutive Director / CIO / Fund Managers / OperationsExecute the investment strategy within approved risk parameters; manage day-to-day operations; implement controls; report performance, risk, and incidents to the board
Second LineChief Risk Officer / Risk Manager / Compliance / ActuaryDesign the risk management framework and methodology; conduct risk assessments; monitor risk limits and KRIs; produce risk reports; challenge first-line decisions; coordinate actuarial analysis
Third LineInternal Audit (or outsourced audit function)Independently assure that governance, controls, and risk management processes are effective; report to the Audit Committee
External AdvisorsInvestment Consultant / Actuary / Legal Counsel / External AuditorProvide independent expert advice on investment strategy, actuarial assumptions, legal compliance, and financial reporting; supplement internal capability

Many pension boards include elected member representatives who may not have investment or risk backgrounds.

Training programs, expert advisory panels, and clear, jargon-free risk reporting are essential to bridge the knowledge gap. Our Three Lines Model guide provides the governance framework you can adapt.

Key Risk Indicators (KRIs) for Pension Fund Monitoring

KRIRisk CategoryMeasurementTolerance ExampleEscalation Trigger
Funded ratio (actuarial basis)Liability / FundingTotal assets ÷ present value of benefit obligations≥ 80%Ratio < 75% → Board emergency session; contribution review
Surplus risk (surplus VaR / surplus TE)Investment / Market1-year 95% surplus VaR as % of liabilities≤ 10% of liabilitiesSurplus VaR > 12% → CIO/CRO review; rebalance discussion
Duration mismatch (asset vs. liability)Interest RateDifference between asset duration and liability duration≤ 2 yearsGap > 3 years → LDI hedge-ratio review
Liquidity coverage ratioLiquidityLiquid assets ÷ projected 12-month benefit payments + margin calls≥ 120%Ratio < 110% → liquidity-contingency plan activation
Illiquid-asset allocationLiquidityPrivate equity + real estate + infrastructure + other illiquids as % of total assets≤ Board-approved maximum (e.g., 30%)Allocation > limit → commitment-pacing review; no new commitments
Active-risk budget utilizationInvestmentActual tracking error vs. benchmark ÷ approved tracking-error budget≤ 100% of budgetUtilization > 110% → CIO review; manager rebalancing
Counterparty exposure concentrationCreditSingle-counterparty exposure as % of total assets≤ 5% per counterpartyAny single exposure > 5% → immediate reduction plan
Longevity-assumption varianceLiability / LongevityActual mortality experience vs. assumed mortality tableVariance within +/– 0.5 year of life expectancy assumptionVariance > 1 year → actuarial assumption review; contribution-impact analysis
Operational-incident countOperationalNumber of operational incidents (errors, system failures, processing delays) per quarterDeclining trend; zero high-severity incidentsAny high-severity incident → immediate root-cause analysis and board notification
Cyber-vulnerability count (critical, unpatched > 30 days)Cyber / TechnologyCount of unpatched critical CVEs in fund systems beyond 30 days≤ 2Count > 2 → CISO escalation; > 5 → Board notification

Configure these KRIs in a KRI dashboard with automated data feeds from the investment platform, custodian, and IT-security systems.

Report KRI status to the Board at every meeting alongside funded-status and investment-performance updates.

ESG and Climate Risk: The New Frontier in Pension Fund Risk Management

Pension funds are among the largest and longest-duration investors in the global economy.

A fund with a 30-year liability horizon cannot afford to ignore risks that materialize over decades: climate transition, physical climate damage, governance failures at portfolio companies, and social-license erosion.

Regulators including the SEC, ISSB, and the EU CSRD increasingly expect institutional investors, including pension funds, to assess and disclose climate-related financial risks.

ESG Risk DimensionPension Fund ImpactAssessment ApproachMitigation Strategy
Climate Transition RiskFossil-fuel and carbon-intensive assets face repricing as economies decarbonize; stranded-asset write-downs reduce portfolio valueCarbon-footprint analysis; TCFD scenario analysis (1.5°C, 2°C, 3°C pathways); transition-risk stress testing on the equity and credit portfoliosReduce exposure to high-carbon sectors; allocate to clean-energy and transition assets; engage with investee companies on transition plans
Physical Climate RiskExtreme weather events damage real-estate holdings, infrastructure investments, and supply chains of portfolio companiesClimate-vulnerability mapping of real-asset holdings; physical-risk scenario analysis; insurance-coverage reviewDivest from highly exposed assets; require climate-resilience standards in real-estate and infrastructure mandates; purchase insurance
Governance Risk at Investee CompaniesPoor governance at portfolio companies leads to value destruction (fraud, excessive executive pay, board ineffectiveness)Proxy-voting analysis; governance-scorecard monitoring; engagement trackingActive ownership: vote proxies in line with governance best practices; engage with boards on improvement; escalate to divestment
Social Risk / Human CapitalLabor-rights violations, health-and-safety failures, and diversity deficits at portfolio companies create legal and reputational exposureHuman-capital KRI monitoring; controversy screening; UN Global Compact compliance trackingEngage investee companies on labor standards; integrate social-risk scores into manager-selection criteria
Regulatory ESG MandatesIncreasing state-level legislation on ESG integration (some mandating, some restricting); GASB and SEC disclosure expectationsRegulatory-change monitoring; legal-compliance review; fiduciary-duty analysis of ESG integrationDocument fiduciary rationale; maintain compliance with applicable mandates; adapt investment-policy language to the regulatory environment

Our ESG key risk indicators framework provides 43 ESG KRIs mapped to SEC, ISSB, CSRD, and GRI standards that pension funds can adopt directly.

Eight Pitfalls in Pension Fund Risk Management

#PitfallConsequenceFix
1Managing assets in isolation from liabilitiesFunded-status volatility blindsides the board; contributions spike during market downturnsAdopt an ALM / LDI framework that evaluates investment decisions relative to liability sensitivity
2Relying on backward-looking risk measures (historic tracking error)Risk assessment reflects the past, not the current portfolio or future scenariosUse forward-looking measures: surplus VaR, stress testing, scenario analysis on the current portfolio
3Trustee skill gaps in risk and investmentBoard approves strategies the board does not fully understand; governance risk materializesMandatory trustee training; independent expert advisors; plain-language risk reporting
4Excessive illiquid-asset allocation without liquidity planningFund cannot meet benefit payments or margin calls without forced salesSet a Board-approved illiquid-asset ceiling; maintain a liquidity buffer; model cash-flow projections under stress
5No formal risk appetite or tolerance statementNo benchmark against which to evaluate risks; risk-taking is implicit, not governedDraft a Board-approved risk appetite statement covering funded-ratio floor, surplus-risk budget, liquidity minimums, and concentration limits
6Ignoring operational and cyber riskData breach compromises member records; processing error delays benefit payments; fund suffers regulatory sanctionExtend the risk management framework beyond investment risk; include operational risk assessments, cyber controls, and vendor oversight
7Treating actuarial assumptions as certaintiesLongevity improvements or discount-rate changes create unfunded liabilities that the board did not anticipateRun sensitivity analysis on key actuarial assumptions (mortality, discount rate, salary growth, retirement age); stress-test funded status under assumption changes
8No integration between the pension fund risk program and the sponsor’s enterprise risk programPension-fund risk exposures do not appear on the corporate risk dashboard; sponsor is blindsided by contribution callsIntegrate pension fund risk reporting into the sponsor’s enterprise risk register and board reporting cycle

Building a Pension Fund Risk Management Program

PhaseTimelineActionsOwnerDeliverable
Phase 1: Governance & PolicyDays 1–30Assess current governance against the OECD four-pillar framework; draft or refresh the risk management policy; define risk appetite (funded-ratio floor, surplus-risk budget, liquidity minimum, concentration limits); map roles using the Three Lines Model; schedule trustee risk-management trainingBoard Chair / CRO / Executive DirectorGap assessment report; draft risk management policy; risk appetite statement; RACI matrix; training plan
Phase 2: Risk Assessment & ALMDays 31–60Conduct a comprehensive risk assessment across all ten risk categories; run ALM analysis (surplus VaR, duration gap, cash-flow projection); perform stress testing on three priority scenarios (equity crash + rate decline, stagflation, longevity shock); identify risks above toleranceCRO / CIO / ActuaryScored pension fund risk register; ALM report; stress-test results; prioritized treatment list
Phase 3: Controls & MonitoringDays 61–75Develop treatment plans per priority risk; implement or strengthen controls (LDI hedge-ratio adjustment, liquidity buffer, operational controls, cyber controls, vendor oversight); configure KRI dashboards with automated feedsCRO / CIO / Operations / ITRisk treatment plans; updated control register; live KRI dashboard
Phase 4: Reporting & EmbeddingDays 76–90Produce the first integrated risk report to the Board (funded-status impact, KRI status, stress-test outcomes, treatment progress); integrate pension fund risks into the sponsor’s enterprise dashboard (if applicable); schedule quarterly reassessment and annual full reviewCRO / Board of TrusteesFirst Board risk report; integrated enterprise dashboard; quarterly and annual review calendar

The Future of Pension Fund Risk Management

AI-Powered ALM and Scenario Modeling. Machine learning models are improving the accuracy and speed of ALM projections, enabling real-time funded-status monitoring and dynamic hedge-ratio adjustment.

The SOA’s 2025 report on model risk management highlights that AI-generated Economic Scenario Generators must be governed with formal validation, back-testing, and human-oversight protocols. See our guide on AI risk assessment frameworks.

Climate Stress Testing as Standard Practice. TCFD-aligned scenario analysis (1.5°C, 2°C, 3°C pathways) is becoming a standard component of pension fund risk assessment.

The Network for Greening the Financial System (NGFS) provides open-source climate scenarios that pension funds can integrate into their ALM models. Our ESG KRI framework maps the indicators to monitor.

Operational Resilience Regulation. The EU’s Digital Operational Resilience Act (DORA) already applies to pension funds in Europe. While the U.S. has no direct equivalent, the trend toward operational-resilience mandates is spreading.

Pension funds should proactively build business continuity and disaster recovery capability rather than waiting to be regulated into doing so.

Decumulation Risk Management. As large defined-benefit plans mature and shift from accumulation (asset growth) to decumulation (net benefit outflows), liquidity management, cash-flow planning, and de-risking glide paths become the dominant risk management challenges.

Funds must model the transition from growth-oriented portfolios to income-generating, liability-matching portfolios with the same rigor they applied to asset accumulation.

Strengthen Your Pension Fund Risk Management Program Today

You now have the ten risk categories, the OECD four-pillar framework, ALM/LDI fundamentals, quantitative tools, KRIs, and a 90-day roadmap. Use these riskpublishing.com resources: Enterprise Risk Management FrameworkRisk Assessment PolicyRisk Register TemplateRisk Assessment MatrixRisk Appetite vs. Risk Tolerance.

More guides: Monte Carlo SimulationScenario AnalysisRisk Quantification for BoardsThree Lines ModelKRI Dashboard GuideThird-Party Risk ManagementBusiness Continuity PlanOperational ResilienceGeopolitical RiskShadow AI Risk Management.

Frequently Asked Questions

What is the biggest risk facing pension funds?

Investment/market risk and liability/longevity risk are the two largest risk categories by funded-status impact.

A simultaneous equity drawdown and interest-rate decline (the “perfect storm” seen in 2001–2003 and 2007–2009) can reduce funded ratios by 15–25 percentage points. Longevity improvements of just one additional year of life expectancy can increase liabilities by 3–5%. ALM and LDI frameworks address both dimensions.

Are U.S. public pension funds required to have a risk management program?

No single federal statute mandates a specific risk management framework the way ERISA governs private plans. However, fiduciary duty under state law implicitly requires prudent risk oversight.

Several states (California, New York, Ohio) have enacted legislation or board policies mandating formal risk management. Regardless of legal mandate, a documented risk program is best practice and the strongest defense of fiduciary compliance.

How does ALM differ from traditional asset allocation?

Traditional asset allocation uses an asset-only framework where cash is the risk-free reference point. ALM uses a liability-relative framework where the fund’s benefit obligations are the reference point.

Under ALM, a 100% equity portfolio might be “high risk” not because equity is volatile, but because equity duration does not match liability duration. ALM reveals the mismatch risk that asset-only frameworks hide. See our Monte Carlo simulation guide to understand how to model liability-relative outcomes.

How often should pension fund risks be assessed?

Formally at least annually, aligned with the actuarial valuation cycle. High-rated risks (investment, liquidity, interest rate) should be monitored continuously through KRI dashboards. Trigger ad-hoc reassessments after major market events, regulatory changes, significant membership changes (e.g., early-retirement windows), or governance transitions.

Should pension funds use FAIR to quantify risk?

FAIR is most directly applicable to the fund’s cyber and operational risk categories, translating those risks into dollar-denominated loss estimates. The investment and liability risk categories typically use ALM-specific quantitative tools (surplus VaR, stress testing, Monte Carlo simulation) rather than FAIR.

However, the principle of financial quantification applies universally: every risk the board reviews should be expressed in terms of funded-ratio impact, contribution-rate sensitivity, or dollar exposure, not just qualitative labels.

References

1. OECD – Pension Funds’ Risk-Management Framework (Working Paper No. 40)

2. ISO 31000:2018 – Risk Management Guidelines

3. COSO ERM – Integrating with Strategy and Performance (2017)

4. IIA Three Lines Model (2020)

5. SOA – Model Risk Management for Pension Funds (December 2025)

6. IMF – Pension Funds and Financial Stability (2025)

7. CFA Institute – Investment Risk Management Resources

8. U.S. Department of Labor – ERISA Fiduciary Responsibilities

9. GASB 67/68 – Financial Reporting for Pension Plans

10. PBGC – Pension Benefit Guaranty Corporation

11. NCPERS – National Conference on Public Employee Retirement Systems

12. NGFS – Network for Greening the Financial System

13. SEC Climate-Related Disclosures

14. IFRS / ISSB Sustainability Standards

15. EU CSRD

16. EU DORA – Digital Operational Resilience Act

17. NIST Cybersecurity Framework 2.0

18. IRM – Institute of Risk Management