← Foundation Course /Module 02 - Inside the Cat Model /Lesson 2.1
MODULE 02 · INSIDE THE CAT MODEL: THE FOUR COMPONENTS

The Hazard Module

📖 ~35 min · Lesson 4 of 15 · 3 micro-checks + quiz ·
The Number That Starts Everything

You are running the Meridian portfolio through Touchstone for the first time. Location MGA-068, the Santiago, Chile office tower at Av. Apoquindo 3600, has good data: confirmed RC Shear Wall construction, 2015 build year, precise street-level coordinates. You hit run.

The model assigns an Annual Average Loss of USD 84,000 to this location. The building is worth USD 6.4M. That is an AAL rate of 1.31%, which, combined with the policy structure, will drive the pricing recommendation your underwriter acts on.

But where did that USD 84,000 come from? Before the model touched the exposure data or applied any financial conditions, something happened first: the model looked at the coordinates and asked, "What is the hazard at this location?" It reached into a database of simulated earthquake events, found every event in the catalogue that would produce significant shaking at this precise point in Santiago, calculated what the ground motion intensity would be for each one, and assigned a probability to each scenario.

That database, the hazard catalogue, is the foundation on which every loss estimate in the model is built. What is it, how was it constructed, and what does it assume?

What the Hazard Module Does

The hazard module answers one question for every location in portfolio: given where this property sits, what physical intensity could each possible catastrophe event produce here? It does not ask whether the building is insured, how much it is worth, or how well it is built. It asks only about the physical environment, the seismic activity in the region, the wind patterns of tropical cyclones, the flood hydrology of the river basin, and translates that physical environment into a probability distribution of intensities at a specific geographic point.

The hazard module's output is a hazard surface, a spatial grid of intensity values. For earthquake, the intensity metric is typically Peak Ground Acceleration (PGA) or Spectral Acceleration (SA), the rate at which the ground accelerates during shaking, measured in fractions of gravitational acceleration. For hurricane, it is 3-second gust wind speed in mph or m/s. For flood, it is inundation depth in metres. For wildfire, it is a composite fire weather and vegetation intensity index. Each metric is calculated at specific geographic grid points across the entire model domain.

When you give the model a coordinate pair for the Santiago tower, it places that point on the hazard grid and reads off the intensity value for every simulated event in the catalogue that would affect that location. Those intensity values, hundreds or thousands of them, each with an associated annual probability, are what the vulnerability module then converts into damage ratios, and what the financial module converts into insured losses. The hazard module's output is the starting point of the entire loss estimation chain.

The Hazard Chain, From Location to Intensity to Loss

Input
MGA-068
Lat -33.415
Lon -70.598
→
Hazard Grid
Place on hazard surface
Read grid cell
→
Catalogue
Find all events affecting this cell
Calculate intensity per event
→
Output
Intensity distribution
(PGA by event)
Santiago Tower MGA-068 - Illustrative Hazard Output by Event
1-in-10 year earthquake PGA0.08g - minor shaking, negligible structural damage expected
1-in-50 year earthquake PGA0.22g - moderate shaking, some non-structural damage
1-in-100 year earthquake PGA0.38g - strong shaking, structural concern for older buildings
1-in-250 year earthquake PGA0.58g - very strong shaking, significant structural demand
1-in-500 year earthquake PGA0.82g - extreme shaking, design-level event for modern code buildings
Why the Hazard Module Is the Foundation

If the hazard module assigns the wrong intensity to a location, everything downstream is wrong, regardless of how good the exposure data or vulnerability functions are. A building placed in the wrong grid cell gets the wrong hazard score. The wrong hazard score produces the wrong damage ratio. The wrong damage ratio, multiplied by even a perfectly accurate TIV, produces a wrong loss. This is why geocoding quality, the accuracy of the coordinate that places the location on the hazard grid, is the most critical data quality issue in the entire cat modelling workflow. A perfect address in the wrong location on the grid is as useless as no address at all.

The Stochastic Event Catalogue - What It Is and How It Is Built

The stochastic event catalogue is the core of the hazard module. It is a large synthetic database of simulated catastrophe events, each with a defined physical description (location, magnitude, track, intensity) and an assigned annual rate (the probability of that event occurring in any given year). A typical modern cat model catalogue contains between 10,000 and 100,000 individual events per peril, representing the full distribution of possible events, from frequent, moderate-severity events to rare, extreme events well beyond anything in the modern historical record.

The catalogue is not a list of historical events. It is a synthetic set of plausible events, generated by physical simulation calibrated to historical observations. For hurricane, this means running thousands of years of simulated Atlantic hurricane seasons through a track model calibrated to historical hurricane behaviour, generating synthetic storm tracks, wind speed profiles, and landfall probabilities. For earthquake, it means constructing a probabilistic seismic hazard model from the geological record of fault locations, slip rates, and rupture characteristics, and using that model to generate synthetic earthquake scenarios across the full range of possible magnitudes and locations.

Illustrative Stochastic Catalogue - Chile Earthquake Events Near Santiago (Selected)

EQ-CHL-00042
Rate: 0.85/yr Mw 5.8, 45km NE, shallow
EQ-CHL-01287
Rate: 0.32/yr Mw 6.2, 80km W, intermediate
EQ-CHL-03891
Rate: 0.08/yr Mw 7.0, subduction, 120km NW
EQ-CHL-07234
Rate: 0.025/yr Mw 7.6, subduction, 200km N
EQ-CHL-11562
Rate: 0.007/yr Mw 8.2, subduction, Valparaíso
EQ-CHL-18834
Rate: 0.002/yr Mw 8.8, subduction megathrust
EQ-CHL-24107
Rate: 0.0005/yr Mw 9.1, maximum credible event

Bar length = relative hazard intensity at MGA-068. Rate = expected occurrences per year. A rate of 0.007/yr = 1-in-143 year return period.

How Event Rates Are Assigned

The annual rate assigned to each synthetic event is what transforms a list of scenarios into a probability distribution. The rate is derived from the physical science of each hazard, from geological fault slip rates, from the historical frequency of tropical cyclone formation, from the observed recurrence interval of major flood events in a river basin. A rate of 0.01 per year means an expected frequency of one occurrence every 100 years, a 1-in-100 year return period. A rate of 0.002 per year means one occurrence every 500 years.

These rates are not simply read from the historical record. The historical record for most locations is too short, spanning perhaps 50–150 years of reliable observations, to provide stable frequency estimates for events with return periods of 200, 500, or 1,000 years. For these rare events, rates are derived from the physical model: fault geology, geodetic measurements of plate motion, palaeoseismological evidence of past earthquakes preserved in geological strata. The model's ability to estimate rates for events beyond the historical record is precisely its analytical value, and its primary source of uncertainty.

Micro-Check · Before You Continue

The Santiago tower MGA-068 is in a region where the historical earthquake record goes back approximately 120 years. The cat model assigns a rate of 0.002 per year (1-in-500 year return period) to the largest event in its catalogue. Why can the model estimate rates for events with 500-year return periods despite having only 120 years of historical data, and what is the primary uncertainty this introduces?

The model derives rates from physical science rather than historical frequency counting. For Chile's subduction zone, geologists can measure the rate at which the Nazca Plate is subducting beneath the South American Plate, approximately 70mm per year. Combined with knowledge of how much stress accumulates per unit of slip and how much stress is released in earthquakes of different magnitudes, this produces a long-term rate estimate for large events that is independent of whether such an event has occurred in the 120-year instrumental record. Similar approaches use palaeoseismology, carbon-dating of fault scarps and liquefaction features in geological strata, to extend the earthquake record back thousands of years.

The primary uncertainty this introduces is in the rate estimates themselves. Physical parameters like slip rates and stress coupling coefficients have measurement uncertainties that propagate into the event rates, and for the rarest, largest events, those uncertainties are the largest. A model might estimate the 1-in-500 year loss with an uncertainty range of ±50% or more, meaning the "true" return period for that event level could plausibly be 250 years or 1,000 years. This is why cat model outputs at the extreme tail carry the widest confidence intervals.

Hazard Intensity Metrics - What Each Peril Measures

Each peril uses a different physical metric to express hazard intensity. These metrics are chosen because they correlate well with building damage, they are the physical quantities that most directly drive structural response. Understanding what each metric measures is important because it explains why certain exposure data fields matter more for some perils than others.

Peril Primary Intensity Metric Why This Metric Secondary Factors
Earthquake Peak Ground Acceleration (PGA) · Spectral Acceleration (SA) PGA drives damage to short-period structures (masonry, low-rise). SA at the building's natural period drives damage to taller structures. Both are direct inputs to structural engineering damage functions. Soil type (amplifies or attenuates shaking) · Depth of earthquake · Distance from fault · Local site conditions (Vs30)
Hurricane / Tropical Cyclone 3-second peak gust wind speed (mph or m/s) Structural wind loading is proportional to the square of wind speed. Peak gust governs cladding and roofing damage. Sustained wind speed governs structural frame loading. Most vulnerability functions use gust speed as the primary input. Storm forward speed · Angle of approach · Terrain roughness · Building height · Proximity to coast (surge zone)
Inland Flood Inundation depth (metres above floor level) Flood damage to building contents and fabric increases steeply with inundation depth. Depth is the most directly measurable and correlatable metric for residential and commercial flood damage functions. Flow velocity · Flood duration · Sediment load · Salinity (marine flood) · Warning time (affects contents removal)
European Windstorm Maximum 3-second gust wind speed Same physical basis as hurricane wind damage. European extratropical windstorms produce a different track and wind field structure than tropical cyclones but the structural loading mechanism is identical. Storm duration · Multiple wind directions · Regional building stock characteristics
Wildfire Fire Weather Index (FWI) composite · Flame length · Radiant heat flux Structure ignition probability is driven by the combination of ember exposure, radiant heat from the fire front, and direct flame contact. Multiple metrics are combined in wildfire vulnerability models. Vegetation type and fuel load · Wind speed and direction · Structural construction materials · Defensible space
Cyber Attack vector type · Propagation mechanism · Network reach Cyber hazard has no single physical intensity metric equivalent. Severity is modelled through the combination of attack type (ransomware vs wiper vs DDoS), propagation mechanism (network vs supply chain vs cloud), and the breadth of affected systems. Patch management maturity · Vendor market share · Backup availability · Response time
Why Intensity Metrics Matter for Exposure Data

The intensity metric determines which exposure fields are most important for a given peril. For earthquake, soil type (Vs30) can amplify or reduce PGA by a factor of 3-5, making it a critical secondary modifier. For hurricane, building height affects vulnerability because taller buildings experience higher wind speeds at elevation and have different structural periods. For flood, first floor height above grade directly determines the depth of inundation at which damage begins. When you see a field in the SOV labelled "first floor height" or "Vs30" or "number of storeys," you are looking at the exposure data that allows the vulnerability module to apply the right damage function for the hazard intensity the hazard module has calculated.

Return Periods as Descriptions of Hazard Severity

Return periods are frequently misunderstood, even by experienced practitioners. They are a way of expressing the probability of a hazard exceeding a given intensity threshold in any given year. A 1-in-100 year return period earthquake does not mean an earthquake that occurs once per century. It means an earthquake whose intensity is exceeded with a probability of 1% in any given year, which is a subtly but importantly different statement.

1-in-10 10% annual probability
Frequent moderate events. Forms the base of the EP curve. Cat XL reinsurance rarely attaches here.
1-in-50 2% annual probability
Significant events occurring roughly once per professional career. Common Cat XL attachment level.
1-in-100 1% annual probability
The primary underwriting reference return period at Lloyd's. Primary Cat XL layer pricing benchmark.
1-in-200 0.5% annual probability
The Solvency II regulatory capital return period. Lloyd's capital model reference scenario.
1-in-500 0.2% annual probability
Extreme tail events. ILS pricing reference. Very wide model uncertainty at this level.

The distinction between a return period and a scheduled recurrence matters operationally. If a 1-in-100 year event occurs this year, the probability of it occurring again next year is still 1%, not less. The event's occurrence does not "reset" the probability or mean the region is now "safe" for 99 years. Over any 100-year period, the probability of experiencing at least one 1-in-100 year event is approximately 63%, not 100%. Two 1-in-100 year events in the same decade is not impossible, it is unlikely but mathematically consistent with the stated probability.

For the hazard module specifically, return periods describe hazard intensity thresholds, not event frequency. A "1-in-100 year wind speed" at a specific location means the wind gust speed that is exceeded with 1% annual probability at that point. The hazard module calculates this threshold by summing the contributions of all events in the stochastic catalogue that affect that location, weighting each by its annual rate. The output, the hazard return period curve, is what the vulnerability module uses to calculate damage at each severity level.

Micro-Check · Before You Continue

A major hurricane struck the Texas coast in 2017 (Harvey) and again in 2024 (Beryl). A property owner in Houston argues: "We just had two major hurricanes in seven years, the model must be underestimating the risk because it says a major hurricane here is only a 1-in-20 year event." Is this reasoning correct?

No, this is the classic confusion between observed frequency in a short sample and the true underlying probability. A 1-in-20 year return period means a 5% annual probability of occurrence. Over any 7-year period, the probability of experiencing at least two such events is approximately 17%, which is uncommon but far from impossible. Two major hurricanes in seven years is consistent with a 1-in-20 year return period model. In fact, updating a model based on short-period observational clustering is a well-known error: it would systematically overestimate risk after active periods and underestimate it after quiet periods. The stochastic catalogue is calibrated to the long-run physical rate of hurricane formation and landfall, not to the most recent 10-year experience. That long-run rate is more reliable than any short observational window, especially for a hazard as variable as tropical cyclone tracks.

What the Hazard Module Assumes - and Why It Matters

Every hazard module is built on a set of assumptions about the physical world. These assumptions are necessary, a model that made no assumptions would be indistinguishable from the physical world itself, which is what we are trying to approximate. But the assumptions introduce systematic uncertainty, and understanding them is what allows a practitioner to know when the model is likely to be wrong.

ASSUMPTION 01

Stationarity - The Hazard Distribution Is Stable Over Time

Most hazard modules are calibrated to historical observation data and assume that the frequency and severity distribution of events is the same in the future as it was in the past. A catalogue built on 150 years of Atlantic hurricane data assumes the next 150 years will have similar statistics.

Consequence when violated: Climate change is altering the frequency and intensity of multiple perils, particularly hurricane intensification, wildfire weather, and extreme heat. Historical calibration increasingly underestimates future risk for these perils.
ASSUMPTION 02

Completeness - The Historical Record Is Representative

Hazard models are calibrated to events in the instrumental record, typically 50–150 years. The model assumes this period is long enough to have sampled the full distribution, including the most severe events.

Consequence when violated: The Tōhoku 2011 earthquake exceeded the maximum magnitude considered credible by the existing Japan subduction zone models, because no event of that magnitude had occurred in the instrumental record. The historical record had not sampled the true tail.
ASSUMPTION 03

Independence - Events Are Statistically Independent

Most cat models assume that events in the stochastic catalogue are statistically independent, the occurrence of one event does not change the probability of another in the same year or the following year.

Consequence when violated: Some hazards show temporal clustering, aftershocks following mainshocks, active Atlantic hurricane seasons correlating with La Niña, drought years clustering in wildfire-prone regions. Independence assumptions underestimate the probability of multiple large events in close succession.
ASSUMPTION 04

Spatial Completeness - Hazard Is Modelled Everywhere

The model assumes its hazard grid covers the full geographic domain of the exposure and that intensity can be reliably estimated at every point on the grid.

Consequence when violated: In emerging markets, hazard data is often sparse or absent. A grid cell with no observations may be assigned a default hazard level that bears no relationship to local geology or hydrology. This is why model maturity varies dramatically between the US and, for example, sub-Saharan Africa.
ASSUMPTION 05

Ground Motion Prediction - Attenuation Equations Are Calibrated

For earthquake specifically, the model uses Ground Motion Prediction Equations (GMPEs) to estimate how seismic energy attenuates with distance from the fault rupture. These equations are derived from recorded ground motion data.

Consequence when violated: GMPEs have wide epistemic uncertainty, especially at long distances and for rare large events. The same earthquake scenario can produce hazard estimates varying by a factor of 2–3 depending on which GMPE is used, a primary source of model-to-model divergence for earthquake risk.
ASSUMPTION 06

Local Site Effects - Soil Amplification Is Captured

The hazard module assigns each grid cell a local site amplification factor based on soil type. Soft soils amplify seismic waves significantly relative to bedrock, by a factor of 3-5 or more in extreme cases.

Consequence when violated: Where site amplification data is unavailable, common in emerging markets and for older model generations, the model assigns a default. Properties on soft soil without site correction can be systematically underestimated by a factor of 2-4, as occurred in the Mexico City earthquake context.
In Practice - Recognising When to Question the Hazard

You do not need to understand the physics of Ground Motion Prediction Equations to be an effective cat modelling analyst. But you do need to know which hazard assumptions are most likely to be violated for a specific risk. For a portfolio with significant exposure in Turkey, the stationarity assumption is challenged by ongoing seismic activity along the North Anatolian Fault. For a US wildfire portfolio, the stationarity assumption is challenged by changing vegetation and drought conditions. For a Singapore portfolio with substantial Southeast Asian exposure, the completeness assumption is challenged by sparse historical loss data for Indonesian earthquake. Identifying which assumption is under stress for a given geography is the analytical judgement that separates a practitioner from a technician.

Micro-Check · Before You Continue

The Meridian portfolio includes a major hotel in Mexico City, a city built largely on ancient lakebed sediment, which amplifies seismic waves dramatically relative to the surrounding rock. The cat model's hazard grid for Mexico City uses a regional average soil amplification factor rather than site-specific measurements for individual buildings. Which hazard assumption does this violate, and what is the practical implication for your model output for this location?

This violates Assumption 06 - Local Site Effects Are Captured. Mexico City's lakebed sediment produces one of the most extreme soil amplification profiles in the world, the 1985 earthquake caused catastrophic damage specifically in lakebed areas while leaving hillside rock-founded buildings largely undamaged, because the sediment amplified ground motion by a factor of 5–10 at certain frequencies. If the model assigns a regional average soil amplification rather than site-specific amplification for the hotel's precise location, it will systematically underestimate hazard for a lakebed location and overestimate it for a rock-founded location.

The practical implication: you should flag the Mexico City hotel as a location where the hazard module output is likely less reliable than the headline model uncertainty suggests, note in your run commentary that site-specific soil data would improve the estimate, and potentially apply an upward sensitivity adjustment if the hotel's specific address places it in a known high-amplification zone. The 1985 Mexico City earthquake is precisely the event that established this as a critical modelling issue, and a good cat modelling analyst working on a Mexico City risk should know this history.

Common Misconceptions

01
"A bigger earthquake means a bigger loss, always"

Magnitude is a measure of the total energy released by an earthquake, not the ground shaking at any specific location. A magnitude 8.0 earthquake 500km away may cause less shaking at a specific site than a magnitude 6.5 earthquake 10km away. The hazard module calculates local intensity at each location, which depends on magnitude, depth, distance, source characteristics, and local site conditions simultaneously.

02
"The stochastic catalogue contains only real historical events"

The catalogue is synthetic, constructed by simulation, not by listing historical events. Historical events are used to calibrate the physical models, but the catalogue itself contains tens of thousands of hypothetical events that have never occurred. Including events that have never occurred is precisely the point: it is what allows the model to estimate probabilities at return periods beyond the historical record.

03
"Two models using the same return period are producing comparable outputs"

Return period is a probability statement, not a scenario definition. RMS's 1-in-100 year California earthquake and AIR's 1-in-100 year California earthquake may correspond to very different physical events, different magnitudes, different locations, different intensity distributions across the state, even if both are calibrated to the same 1% annual exceedance probability. The hazard catalogues behind the headline return period numbers can diverge significantly.

04
"A high-hazard location is always a high-loss location"

High hazard is necessary but not sufficient for high loss. A vacant lot in a high-seismic zone has zero insured loss regardless of the PGA. A well-engineered, well-constructed modern building in the same zone has much lower expected loss than an unreinforced masonry building nearby with the same TIV. Hazard tells you the physical intensity. Exposure and vulnerability, the next two components, determine how that intensity translates into financial loss.

Key Terms

Hazard Module

The first of the four cat model components. Takes a geographic location and returns the probability distribution of physical intensities that could occur there from catastrophe events. The foundation on which all downstream loss calculations are built.

Stochastic Event Catalogue

A large synthetic database of simulated catastrophe events, each with a defined physical description and an assigned annual rate. The core of the hazard module. Typically contains 10,000–100,000 events per peril, representing the full distribution of possible events.

Hazard Footprint

The geographic distribution of intensity from a single event in the stochastic catalogue. For a hurricane, this is the wind field, the pattern of wind speeds across the affected region. For an earthquake, it is the ground motion pattern. Every event in the catalogue has a unique footprint.

Annual Rate

The expected number of times a specific synthetic event would occur per year if the world ran forward indefinitely. A rate of 0.01 per year corresponds to a 1-in-100 year return period. Rates are derived from physical science rather than historical event counting for rare events.

Peak Ground Acceleration (PGA)

The primary intensity metric for earthquake hazard. Measured in fractions of gravitational acceleration (g). PGA drives damage to short-period, low-rise structures. Taller buildings respond more to spectral acceleration at their natural period.

Hazard Grid

The spatial database of hazard intensities at specific geographic points that makes up the model's hazard surface. When a location is geocoded, the model places it on the hazard grid and reads the intensity values from the relevant grid cells.

Soil Amplification

The increase in ground motion intensity caused by soft or unconsolidated soils relative to bedrock. Can amplify earthquake intensity by a factor of 3–10. A critical secondary hazard parameter captured, or not, in the hazard module's site classification system.

Non-Stationarity

The condition where the statistical distribution of hazard is changing over time. Climate change introduces non-stationarity into hurricane intensity, wildfire weather, and extreme heat distributions. When present, historical calibration systematically underestimates future risk.

GMPE

Ground Motion Prediction Equation. The mathematical relationship used to estimate how earthquake ground motion intensity decreases (attenuates) with distance from the fault. A primary source of epistemic uncertainty in earthquake hazard models and a major driver of vendor model divergence.

Knowledge Check - Lesson 2.1

Five questions · 4 of 5 correct (80%) to pass

1. You are comparing cat model outputs for two Meridian locations: MGA-068 in Santiago, Chile (RC Shear Wall, 2015, precise street-level geocode) and MGA-063 in Lagos, Nigeria (no construction data, no year built, approximate neighbourhood geocode). Both produce an AAL figure. Which AAL estimate is more reliable, and what specifically makes it so?

AThe Lagos estimate is more reliable because Nigeria's lower seismic and wind hazard means there is less uncertainty in the hazard module output, in lower-hazard environments, the intensity calculations are simpler and more stable than in high-hazard regions like Chile.
BThe Santiago estimate is more reliable for three compounding reasons. First, the hazard module: Chile's subduction zone hazard is extensively studied and the model's GMPE calibration for this region is robust, the hazard grid is well-populated with observations. Second, the exposure chain: the precise street-level geocode places the building on the correct hazard grid cell, and the known construction type allows the vulnerability module to select the correct damage function. Third, the data: Lagos has no construction class, no year built, and an approximate geocode, meaning the hazard module may place it in the wrong grid cell, and the vulnerability module will apply a default that may bear no relationship to the actual building. The Santiago estimate carries quantifiable uncertainty from physics. The Lagos estimate carries unquantifiable uncertainty from data gaps.
CBoth estimates are equally reliable because the cat model applies consistent methodology regardless of data quality, the model fills gaps with conservative defaults, which ensures that even incomplete data produces defensible outputs.
DNeither estimate can be assessed for reliability without knowing which vendor model was used. RMS and AIR have different hazard databases for Chile and Nigeria, and the reliability of the output depends entirely on which vendor's hazard catalogue is better calibrated for each geography.

2. Halcyon's underwriter is reviewing a coastal Florida commercial property. The cat model shows a 1-in-100 year hurricane loss of USD 3.2M. She asks: "Does this mean we should expect a USD 3.2M loss roughly once every 100 years?" How do you explain the correct interpretation?

AYes, a 1-in-100 year loss means the property is expected to sustain approximately USD 3.2M in losses once per century. Over a 100-year portfolio management horizon, budgeting for one occurrence of this loss level is appropriate.
BNot quite. The 1-in-100 year loss means there is a 1% probability of exceeding USD 3.2M in any given year, not that the loss occurs on a 100-year schedule. The event could occur next year and again the year after; it could also not occur for 300 years. Over a 100-year horizon, the probability of at least one exceedance is approximately 63%. The correct framing for underwriting is: "In any policy year, there is a 1% chance this location contributes more than USD 3.2M to a cat loss." That 1% probability is what drives how the underwriter should weight this location in the portfolio accumulation against the Cat XL attachment.
CThe interpretation depends on whether this is an OEP or AEP figure. For OEP, USD 3.2M is the single worst event in a year with 1% probability. For AEP, it is the annual aggregate loss with 1% probability. The underwriter's question cannot be answered without knowing which metric was used.
DThe 1-in-100 year figure is a long-run average, it means that over any sufficiently long period, the average loss will be USD 3.2M per 100 years. In any specific 100-year window, the actual total could be higher or lower, but the long-run rate per century is USD 3.2M.

3. Two cat vendors, Moody's RMS and Verisk AIR, produce 1-in-100 year earthquake loss estimates for Halcyon's Japan portfolio that differ by 40%. The underwriter concludes one vendor must be wrong. Is this the right conclusion?

AYes, for a well-studied peril like Japan earthquake, a 40% divergence indicates a data or methodology error in one of the models. A correctly calibrated model should produce results within ±10–15% of competing vendors for mature perils in well-observed markets.
BNo, a 40% divergence between vendors is within the normal range of epistemic uncertainty for earthquake modelling, even in Japan. The two vendors use different stochastic catalogues, different Ground Motion Prediction Equations, and different soil amplification datasets, all of which reflect genuine scientific uncertainty rather than error. The correct response is not to identify which vendor is right but to understand the sources of divergence: do the catalogues differ in their representation of the most damaging fault systems? Do the GMPEs differ in their treatment of deep subduction events? Does one model have more granular soil data for the Tokyo and Osaka urban areas? The 40% range is itself informative, it quantifies the epistemic uncertainty in the hazard module for this peril and geography.
CThe conclusion depends on whether the portfolio is dominated by Tokyo or regional exposures. For Tokyo-concentrated portfolios, vendor convergence is typically much tighter because Tokyo's hazard is very well-studied. A 40% divergence implies either a data error or an unusual portfolio composition that is making one vendor's regional model more sensitive to specific fault assumptions.
DThe divergence is expected and irrelevant to underwriting decisions, Lloyd's CMR requirements specify which vendor output to use for regulatory purposes, eliminating the need to reconcile competing estimates. The underwriter should use the approved vendor output and disregard the other.

4. The cat model's stochastic catalogue for Caribbean hurricane includes a synthetic event with a central pressure of 882 mb and maximum sustained winds of 185 mph, more intense than any hurricane ever recorded. Halcyon's underwriter argues this event should be removed from the model because it has never happened and is therefore not a credible scenario. How do you respond?

AThe underwriter is correct, a cat model calibrated to the physical science should only include events within the range of observed historical events. Including events beyond the observed range introduces speculation that reduces the model's actuarial credibility.
BThe underwriter's reasoning confuses "never recorded" with "impossible." The stochastic catalogue is deliberately constructed to include events beyond the historical record, that is precisely what makes it more useful than a simple list of historical events. The physical conditions that allow 185 mph winds to develop are present in the Atlantic basin. Removing this event would mean the model underestimates the extreme tail of the loss distribution, the very scenario where having adequate capital matters most. The event has a very low annual rate (perhaps 0.0001 per year, a 1-in-10,000 year return period), its contribution to the AAL is negligible, but it is essential for pricing catastrophe bond layers and extreme reinsurance tail covers where the portfolio's response to the absolute worst scenario is precisely what is being priced.
CThe underwriter is partially correct, events with return periods beyond 1-in-1,000 years should be excluded from standard pricing analysis but retained for stress testing and capital modelling. A pragmatic compromise would be to run two models: one with the full catalogue for capital purposes and one restricted to 1-in-1,000 year events for pricing.
DThe response depends on the specific asset class being insured. For residential property, extreme tail events beyond 1-in-500 years are not relevant to pricing because individual policy limits mean any event beyond this level produces a total loss regardless of severity. For large commercial risks without sublimits, the extreme tail events are relevant and should be retained.

5. Halcyon is considering writing a large renewable energy portfolio, 200 solar farms across the US Southeast and Plains states. The cat model produces AAL and EP curve estimates for wind and hail risk. Why might the hazard module perform less reliably for this portfolio than for a comparable portfolio of commercial buildings, and what should you flag to the underwriter?

ANo difference in reliability, the hazard module calculates physical intensity (wind speed, hail size) at specific geographic locations regardless of what asset is being insured. The hazard output is identical for a solar farm and a commercial building at the same location.
BThe hazard module will underperform because solar farms are located in rural areas where the hazard grid resolution is lower than in urban areas, leading to greater uncertainty in the hazard intensity assignment for these locations specifically.
CThe hazard module itself may perform reasonably, US wind and hail hazard data is extensive. The reliability problem sits at the hazard-to-vulnerability interface. Solar panel damage is driven by hail kinetic energy (a function of hailstone size and density, not just wind speed), and most commercial cat model vulnerability functions were not calibrated to solar panel damage, they were calibrated to residential and commercial building damage. A wind speed that produces a 15% mean damage ratio for a commercial building may produce a 60% damage ratio for a solar panel array. You should flag that the hazard module output is likely sound but that the vulnerability functions the model applies to solar exposure may not reflect the actual damage relationship, and that specialist renewable energy cat models or engineering-based assessments may be needed for this account.
DThe primary reliability issue is that solar farms span very large areas, a single "location" might cover hundreds of acres, making the point-based hazard grid assumption invalid. The model should assign spatially distributed hazard across the farm area rather than a single point intensity, and failure to do so introduces systematic error.