Back to Frameworks

IAIS Insurance Core Principles (ICPs)

Self-Assess
International (IAIS members; assessed by the IMF and World Bank under the FSAP)
vAs updated December 2024 (adopted 1 October 2011; ICP 11 merged into ICP 10 in November 2019; ComFrame adopted November 2019, updated December 2024)
24 domains
205 controls

The International Association of Insurance Supervisors (IAIS) Insurance Core Principles (ICPs) provide a globally accepted framework for the supervision of the insurance sector. The 26 ICPs cover licensing, governance, risk management, conduct of business, group supervision, and cross-border cooperation. They serve as the benchmark for insurance regulation globally and are assessed by the IMF and World Bank as part of Financial Sector Assessment Programs (FSAPs).

Verified

IAIS Insurance Core Principles (ICPs) is a compliance framework from International (IAIS members; assessed by the IMF and World Bank under the FSAP) with 24 domains and 205 controls that map to 222 other frameworks. The largest domains are ICP 17: Capital adequacy – IAIS Insurance Core Principles (ICPs) (18 controls), ICP 16: Enterprise risk management for solvency purposes – IAIS Insurance Core Principles (ICPs) (16 controls), ICP 12: Exit from the market and resolution – IAIS Insurance Core Principles (ICPs) (14 controls). Every control below carries what it requires and what an assessor expects to see.

Maintained by Gerard BlokdykControl text last updated

Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.

Framework Domains (24)

ICP 10: Preventive measures, corrective measures and sanctions – IAIS Insurance Core Principles (ICPs)

6 controls
Controls in the ICP 10: Preventive measures, corrective measures and sanctions – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 6 controls
CodeTitle
iais-insurance-core-principles-icps::10.110.1 Action against unlicensed insurance activity
iais-insurance-core-principles-icps::10.210.2 Preventive measures where an insurer looks likely to breach requirements
iais-insurance-core-principles-icps::10.310.3 Corrective measures where an insurer fails to comply
iais-insurance-core-principles-icps::10.410.4 Required actions, periodic checks that they are taken, and assessment of their effect
iais-insurance-core-principles-icps::10.510.5 Escalation and enforcement where concerns remain unaddressed
iais-insurance-core-principles-icps::10.610.6 Proportionate sanctions on insurers and individuals

ICP 12: Exit from the market and resolution – IAIS Insurance Core Principles (ICPs)

14 controls
Controls in the ICP 12: Exit from the market and resolution – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 14 controls
CodeTitle
iais-insurance-core-principles-icps::12.112.1 A legislated framework for voluntary exit that protects policyholders
iais-insurance-core-principles-icps::12.1012.10 High legal priority for policyholders' claims in liquidation
iais-insurance-core-principles-icps::12.1112.11 Resolution powers respect the claims hierarchy and no creditor worse off than in liquidation; departures from equal treatment substantiated
iais-insurance-core-principles-icps::12.1212.12 Legislation states whether insurance liabilities may be restructured and whether policyholders may absorb losses
iais-insurance-core-principles-icps::12.1312.13 Mechanisms to resolve the head of a domestic insurance group
iais-insurance-core-principles-icps::12.1412.14 Authority to resolve a foreign insurer's branch, coordinated with the home authorities
iais-insurance-core-principles-icps::12.212.2 A legislated resolution framework that protects policyholders and absorbs losses in the claims hierarchy
iais-insurance-core-principles-icps::12.312.3 Processes and procedures to prepare for and conduct resolution
iais-insurance-core-principles-icps::12.412.4 Regular assessment of which insurers need a resolution plan; plans and resolvability assessments for systemic or critical insurers
iais-insurance-core-principles-icps::12.512.5 Clearly defined roles of the authorities involved in exit and resolution
iais-insurance-core-principles-icps::12.612.6 Information sharing, cooperation and coordination with other authorities on exit and resolution
iais-insurance-core-principles-icps::12.712.7 Legislated criteria for initiating resolution
iais-insurance-core-principles-icps::12.812.8 A range of resolution powers proportionate to the sector, exercised flexibly and under safeguards
iais-insurance-core-principles-icps::12.912.9 Supervisor involvement in initiating liquidation

ICP 13: Reinsurance and other forms of risk transfer – IAIS Insurance Core Principles (ICPs)

6 controls
Controls in the ICP 13: Reinsurance and other forms of risk transfer – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 6 controls
CodeTitle
iais-insurance-core-principles-icps::13.113.1 A reinsurance programme appropriate to the business and integrated with risk and capital management
iais-insurance-core-principles-icps::13.213.2 Internal controls over implementing the reinsurance programme
iais-insurance-core-principles-icps::13.313.3 Demonstrating the economic impact of the risk transfer
iais-insurance-core-principles-icps::13.413.4 Cross-border reinsurance: account taken of the reinsurer's home supervision
iais-insurance-core-principles-icps::13.513.5 The reinsurance programme considered in liquidity management
iais-insurance-core-principles-icps::13.613.6 Capital-market risk transfer understood, assessed and its issues addressed

ICP 14: Valuation – IAIS Insurance Core Principles (ICPs)

10 controls
Controls in the ICP 14: Valuation – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 10 controls
CodeTitle
iais-insurance-core-principles-icps::14.114.1 Valuation covers recognition, derecognition and measurement
iais-insurance-core-principles-icps::14.1014.10 Appropriate allowance for embedded options and guarantees
iais-insurance-core-principles-icps::14.214.2 Assets and liabilities valued on consistent bases
iais-insurance-core-principles-icps::14.314.3 Reliable, decision-useful and transparent valuation
iais-insurance-core-principles-icps::14.414.4 Economic valuation at risk-adjusted present value of cash flows
iais-insurance-core-principles-icps::14.514.5 No credit for the insurer's own credit standing in liabilities
iais-insurance-core-principles-icps::14.614.6 The current estimate: present value of all relevant projected cash flows on unbiased current assumptions
iais-insurance-core-principles-icps::14.714.7 Technical provisions equal the current estimate plus a margin over current estimate
iais-insurance-core-principles-icps::14.814.8 The MOCE reflects the uncertainty in the current estimate
iais-insurance-core-principles-icps::14.914.9 Time value of money with supervisor-set criteria for discount rates

ICP 15: Investments – IAIS Insurance Core Principles (ICPs)

5 controls
Controls in the ICP 15: Investments – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 5 controls
CodeTitle
iais-insurance-core-principles-icps::15.115.1 Regulatory investment requirements on the insurer's investment activities
iais-insurance-core-principles-icps::15.215.2 Portfolio as a whole: secure assets in the right location, payments met as due, adequate diversification
iais-insurance-core-principles-icps::15.315.3 Investment appropriate to the nature and duration of the liabilities
iais-insurance-core-principles-icps::15.415.4 Invest only where the risks can be properly assessed and managed
iais-insurance-core-principles-icps::15.515.5 Quantitative and qualitative limits on complex, less transparent or less regulated assets and markets

ICP 16: Enterprise risk management for solvency purposes – IAIS Insurance Core Principles (ICPs)

16 controls
Controls in the ICP 16: Enterprise risk management for solvency purposes – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 16 controls
CodeTitle
iais-insurance-core-principles-icps::16.116.1 ERM identifies all reasonably foreseeable material risks and their interdependencies
iais-insurance-core-principles-icps::16.1016.10 A regular own risk and solvency assessment (ORSA)
iais-insurance-core-principles-icps::16.1116.11 Board and Senior Management responsible for the ORSA
iais-insurance-core-principles-icps::16.1216.12 ORSA scope: all material risks, the link between risk and financial resources, and where necessary macroeconomic and counterparty stress
iais-insurance-core-principles-icps::16.1316.13 ORSA determines needed financial resources; risk actions consider economic and regulatory capital; capital quality and adequacy assessed
iais-insurance-core-principles-icps::16.1416.14 Continuity analysis over a longer horizon with projections of future financial position and capital compliance
iais-insurance-core-principles-icps::16.1516.15 Recovery planning: options evaluated in advance; regular assessment of who needs a plan; plans for systemic or critical insurers kept current
iais-insurance-core-principles-icps::16.1616.16 Supervisory review of the ERM framework and ORSA, with strengthening required where necessary
iais-insurance-core-principles-icps::16.216.2 Quantification under a wide range of techniques and, as necessary, total-balance-sheet stress testing
iais-insurance-core-principles-icps::16.316.3 ERM links risk appetite, risk limits, regulatory capital, economic capital and risk monitoring
iais-insurance-core-principles-icps::16.416.4 A risk appetite statement covering aggregate risk, all material risk categories and operationalised through risk limits
iais-insurance-core-principles-icps::16.516.5 An explicit asset-liability management policy
iais-insurance-core-principles-icps::16.616.6 An explicit investment policy: risk within appetite and limits, compliance with investment rules, procedures for complex assets, counterparty appetite
iais-insurance-core-principles-icps::16.716.7 An underwriting policy: risk within appetite, nature of risks including macroeconomic links, interaction with reinsurance and pricing
iais-insurance-core-principles-icps::16.816.8 Liquidity risk addressed with strategies to meet liabilities in normal and stressed conditions
iais-insurance-core-principles-icps::16.916.9 As necessary: liquidity stress testing, a portfolio of unencumbered liquid assets, a contingency funding plan and a liquidity report to the supervisor

ICP 17: Capital adequacy – IAIS Insurance Core Principles (ICPs)

18 controls
Controls in the ICP 17: Capital adequacy – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 18 controls
CodeTitle
iais-insurance-core-principles-icps::17.117.1 A total balance sheet approach to solvency assessment
iais-insurance-core-principles-icps::17.1017.10 An approach to identifying and valuing capital resources consistent with the total balance sheet
iais-insurance-core-principles-icps::17.1117.11 Capital quality criteria based on loss absorbency on going concern, solvent run-off and liquidation or resolution bases
iais-insurance-core-principles-icps::17.1217.12 Internal models: modelling criteria for broad consistency and the control levels they may be used for
iais-insurance-core-principles-icps::17.1317.13 Prior approval of an internal model: appropriateness shown, statistical quality, calibration and use tests passed, documentation met
iais-insurance-core-principles-icps::17.1417.14 Statistical quality test: techniques fit the risks, methodology, inputs and assumptions justified, overall risk position covered, data accurate and complete
iais-insurance-core-principles-icps::17.1517.15 Calibration test against the modelling criteria
iais-insurance-core-principles-icps::17.1617.16 Model governance and the use test: Board and management control, understanding and embedding in risk strategy and operations
iais-insurance-core-principles-icps::17.1717.17 Documentation of the model's design, construction, governance and validation
iais-insurance-core-principles-icps::17.1817.18 Ongoing monitoring, validation, notification of material changes and regular reporting on the model
iais-insurance-core-principles-icps::17.217.2 Capital requirements set so obligations are met in adversity, and capital resources maintained to meet them
iais-insurance-core-principles-icps::17.317.3 Solvency control levels that trigger graded, timely supervisory measures
iais-insurance-core-principles-icps::17.417.4 At least two control levels: the Prescribed Capital Requirement and the Minimum Capital Requirement
iais-insurance-core-principles-icps::17.517.5 Group-wide solvency control levels fitted to the group capital approach
iais-insurance-core-principles-icps::17.617.6 Standardised approaches, with tailored approaches and internal models allowed on approval
iais-insurance-core-principles-icps::17.717.7 All material risks addressed in valuation and/or capital, with the split made clear and aggregation defined
iais-insurance-core-principles-icps::17.817.8 Target criteria calibrating the standardised approach, and tailored approaches no less prudent
iais-insurance-core-principles-icps::17.917.9 Variations to capital requirements only in limited circumstances

ICP 18: Intermediaries – IAIS Insurance Core Principles (ICPs)

9 controls
Controls in the ICP 18: Intermediaries – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 9 controls
CodeTitle
iais-insurance-core-principles-icps::18.118.1 Intermediaries must be licensed
iais-insurance-core-principles-icps::18.218.2 Ongoing supervisory review of licensed intermediaries
iais-insurance-core-principles-icps::18.318.3 Professional knowledge, experience, integrity and competence
iais-insurance-core-principles-icps::18.418.4 Appropriate governance in intermediaries
iais-insurance-core-principles-icps::18.518.5 Disclosure of terms of business, insurer relationships and remuneration where a conflict may exist
iais-insurance-core-principles-icps::18.618.6 Safeguards over client monies
iais-insurance-core-principles-icps::18.718.7 Supervisory measures against licensed intermediaries where appropriate
iais-insurance-core-principles-icps::18.818.8 Checking that measures are taken and escalating where concerns persist
iais-insurance-core-principles-icps::18.918.9 Action against unlicensed intermediation

ICP 19: Conduct of business – IAIS Insurance Core Principles (ICPs)

13 controls
Controls in the ICP 19: Conduct of business – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 13 controls
CodeTitle
iais-insurance-core-principles-icps::19.119.1 Due skill, care and diligence with customers
iais-insurance-core-principles-icps::19.1019.10 Claims handled in a timely, fair and transparent manner
iais-insurance-core-principles-icps::19.1119.11 Complaints handled in a timely and fair manner
iais-insurance-core-principles-icps::19.1219.12 Policies and processes for protecting and using customer information
iais-insurance-core-principles-icps::19.1319.13 Public disclosure by the supervisor that supports fair treatment
iais-insurance-core-principles-icps::19.219.2 Fair treatment of customers as policy, process and culture
iais-insurance-core-principles-icps::19.319.3 Conflicts of interest avoided or properly managed
iais-insurance-core-principles-icps::19.419.4 Arrangements between insurers and intermediaries that secure fair treatment
iais-insurance-core-principles-icps::19.519.5 Interests of different consumer types considered in product development and distribution
iais-insurance-core-principles-icps::19.619.6 Promotion that is clear, fair and not misleading
iais-insurance-core-principles-icps::19.719.7 Timely, clear and adequate pre-contractual and contractual information
iais-insurance-core-principles-icps::19.819.8 Advice that takes account of the customer's disclosed circumstances
iais-insurance-core-principles-icps::19.919.9 Policy servicing to the end of all obligations, with disclosure of contractual changes and product-relevant information

ICP 1: Objectives, powers and responsibilities of the supervisor – IAIS Insurance Core Principles (ICPs)

4 controls
Controls in the ICP 1: Objectives, powers and responsibilities of the supervisor – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 4 controls
CodeTitle
iais-insurance-core-principles-icps::1.11.1 Primary legislation names the authority responsible for insurance supervision
iais-insurance-core-principles-icps::1.21.2 Primary legislation sets the objectives of supervision: policyholder protection, a fair, safe and stable market, financial stability
iais-insurance-core-principles-icps::1.31.3 Primary legislation gives the supervisor adequate powers
iais-insurance-core-principles-icps::1.41.4 The supervisor seeks legislative change when its powers fall short

ICP 20: Public disclosure – IAIS Insurance Core Principles (ICPs)

13 controls
Controls in the ICP 20: Public disclosure – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 13 controls
CodeTitle
iais-insurance-core-principles-icps::20.120.1 Audited financial statements available at least annually
iais-insurance-core-principles-icps::20.1020.10 Capital adequacy: objectives, policies and processes, the solvency requirements applying, capital available, and internal model information
iais-insurance-core-principles-icps::20.1120.11 Liquidity risk disclosures sufficient for market participants to assess material exposures
iais-insurance-core-principles-icps::20.1220.12 Financial performance in total and by segment: earnings, claims development, pricing adequacy, investment performance
iais-insurance-core-principles-icps::20.1320.13 Specified practices for any non-GAAP financial measures disclosed
iais-insurance-core-principles-icps::20.220.2 Annual public disclosure across ten areas from company profile to financial performance
iais-insurance-core-principles-icps::20.320.3 Company profile: nature of business, structure, segments, environment, objectives and strategies
iais-insurance-core-principles-icps::20.420.4 Governance disclosures: key features of the framework, internal controls and risk management, and how they are implemented
iais-insurance-core-principles-icps::20.520.5 Technical provisions by segment: cash flow assumptions, discount rate rationale, risk adjustment method, description of the method
iais-insurance-core-principles-icps::20.620.6 Insurance risk exposure: nature of risks, objectives and policies, models and underwriting, reinsurance, concentrations
iais-insurance-core-principles-icps::20.720.7 Financial instruments and investments by class, with objectives, policies, values, assumptions and differences between reporting bases
iais-insurance-core-principles-icps::20.820.8 Material investment risk exposures and their management
iais-insurance-core-principles-icps::20.920.9 Asset-liability management: in total and by segment, methodology and assumptions, capital or provisions held for mismatch

ICP 21: Countering fraud in insurance – IAIS Insurance Core Principles (ICPs)

5 controls
Controls in the ICP 21: Countering fraud in insurance – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 5 controls
CodeTitle
iais-insurance-core-principles-icps::21.121.1 Legislation sanctions insurance fraud and prejudicing a fraud investigation
iais-insurance-core-principles-icps::21.221.2 Understanding of fraud risk types, regular sector assessment and required countermeasures
iais-insurance-core-principles-icps::21.321.3 A supervisory framework to monitor and enforce anti-fraud compliance
iais-insurance-core-principles-icps::21.421.4 Regular review of the effectiveness of anti-fraud measures, with action to improve them
iais-insurance-core-principles-icps::21.521.5 Cooperation and information exchange with law enforcement and other supervisors on fraud

ICP 22: Anti-money laundering and combating the financing of terrorism – IAIS Insurance Core Principles (ICPs)

7 controls
Controls in the ICP 22: Anti-money laundering and combating the financing of terrorism – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 7 controls
CodeTitle
iais-insurance-core-principles-icps::22.122.1 Understanding of ML/TF risks, regular sector risk assessment and a risk-based approach consistent with FATF
iais-insurance-core-principles-icps::22.222.2 Enforceable AML/CFT means beyond primary legislation, guidance, and feedback to the sector
iais-insurance-core-principles-icps::22.322.3 A framework to monitor and enforce AML/CFT compliance
iais-insurance-core-principles-icps::22.422.4 Regular review of the effectiveness of AML/CFT measures, with action to improve them
iais-insurance-core-principles-icps::22.522.5 Domestic and cross-border cooperation and information exchange for AML/CFT
iais-insurance-core-principles-icps::22.622.6 Where another authority is designated: awareness of ML/TF risks and liaison with that authority
iais-insurance-core-principles-icps::22.722.7 Where another authority is designated: cooperation and information exchange for AML/CFT purposes

ICP 23: Group-wide supervision – IAIS Insurance Core Principles (ICPs)

3 controls
Controls in the ICP 23: Group-wide supervision – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 3 controls
CodeTitle
iais-insurance-core-principles-icps::23.123.1 Identification of every legal entity in the insurance group
iais-insurance-core-principles-icps::23.223.2 Determination of the scope of group-wide supervision
iais-insurance-core-principles-icps::23.323.3 No narrowing of the group or the scope for want of legal authority over particular entities

ICP 24: Macroprudential supervision – IAIS Insurance Core Principles (ICPs)

5 controls
Controls in the ICP 24: Macroprudential supervision – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 5 controls
CodeTitle
iais-insurance-core-principles-icps::24.124.1 Data collected for macroprudential supervision
iais-insurance-core-principles-icps::24.224.2 Quantitative and qualitative analysis of markets and the sector, covering trends, the current environment and inward and outward risks
iais-insurance-core-principles-icps::24.324.3 An established process to assess systemic importance of insurers and the sector
iais-insurance-core-principles-icps::24.424.4 Macroprudential results and systemic importance feed supervisory requirements
iais-insurance-core-principles-icps::24.524.5 Publication of sector data and statistics

ICP 25: Supervisory cooperation and coordination – IAIS Insurance Core Principles (ICPs)

9 controls
Controls in the ICP 25: Supervisory cooperation and coordination – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 9 controls
CodeTitle
iais-insurance-core-principles-icps::25.125.1 Agreement among involved supervisors on who is the group-wide supervisor
iais-insurance-core-principles-icps::25.225.2 The group-wide supervisor understands the group and leads group-wide supervision
iais-insurance-core-principles-icps::25.325.3 An other involved supervisor understands the group's local entities and their effect on the rest of the group
iais-insurance-core-principles-icps::25.425.4 Coordination arrangements agreed for cross-border groups
iais-insurance-core-principles-icps::25.525.5 A written coordination agreement, put in place
iais-insurance-core-principles-icps::25.625.6 Agreement on whether to establish a supervisory college and how it operates
iais-insurance-core-principles-icps::25.725.7 Crisis management preparations coordinated across supervisors and authorities
iais-insurance-core-principles-icps::25.825.8 In a crisis: prompt notification, joint assessment, and coordinated timely solutions
iais-insurance-core-principles-icps::25.925.9 Coordinated public and group communication during a crisis

ICP 2: Supervisor – IAIS Insurance Core Principles (ICPs)

11 controls
Controls in the ICP 2: Supervisor – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 11 controls
CodeTitle
iais-insurance-core-principles-icps::2.12.1 Operational independence from government and industry
iais-insurance-core-principles-icps::2.102.10 Sufficient human, technological and financial resources
iais-insurance-core-principles-icps::2.112.11 Outsourced supervisory work: expectations set, performance monitored, independence and confidentiality assured
iais-insurance-core-principles-icps::2.22.2 Legal protection for the supervisor and its staff acting in good faith
iais-insurance-core-principles-icps::2.32.3 Transparent appointment and dismissal of the supervisor's head and governing body
iais-insurance-core-principles-icps::2.42.4 Internal governance that preserves integrity and enables accountability
iais-insurance-core-principles-icps::2.52.5 Consistent and equitable application of requirements
iais-insurance-core-principles-icps::2.62.6 Appeal processes that do not impede timely intervention
iais-insurance-core-principles-icps::2.72.7 Statutory duty to protect confidential information
iais-insurance-core-principles-icps::2.82.8 Transparency about how the supervisor exercises its responsibilities
iais-insurance-core-principles-icps::2.92.9 Publication of requirements and public consultation on significant changes

ICP 3: Information sharing and confidentiality requirements – IAIS Insurance Core Principles (ICPs)

6 controls
Controls in the ICP 3: Information sharing and confidentiality requirements – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 6 controls
CodeTitle
iais-insurance-core-principles-icps::3.13.1 Requesting information, including non-public information, from other supervisors and authorities
iais-insurance-core-principles-icps::3.23.2 Sharing information at the supervisor's discretion under safeguards
iais-insurance-core-principles-icps::3.33.3 A legitimate interest and valid supervisory purpose behind every request
iais-insurance-core-principles-icps::3.43.4 Case-by-case assessment and timely, comprehensive responses to requests
iais-insurance-core-principles-icps::3.53.5 Use only for the stated purpose; agreement before any other use or onward passing
iais-insurance-core-principles-icps::3.63.6 Notification and resistance when compelled to disclose received information

ICP 4: Licensing – IAIS Insurance Core Principles (ICPs)

9 controls
Controls in the ICP 4: Licensing – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 9 controls
CodeTitle
iais-insurance-core-principles-icps::4.14.1 Legislation defines insurance activities, prohibits unauthorised activity, sets legal forms, allocates licensing and provides for foreign insurers
iais-insurance-core-principles-icps::4.24.2 Licensing as the control over who may conduct insurance
iais-insurance-core-principles-icps::4.34.3 Clear, objective, public and consistently applied licensing requirements: plans, structure, suitability, governance, capital
iais-insurance-core-principles-icps::4.44.4 Decisions within a clearly specified reasonable time
iais-insurance-core-principles-icps::4.54.5 Refusal where requirements are unmet, conditions where appropriate, and reasons given
iais-insurance-core-principles-icps::4.64.6 A licence states its scope
iais-insurance-core-principles-icps::4.74.7 A published list of licensed insurers and licence scopes
iais-insurance-core-principles-icps::4.84.8 Consultation with the relevant supervisor on foreign branches and subsidiaries
iais-insurance-core-principles-icps::4.94.9 Host consults home before allowing cross-border activity without physical presence

ICP 5: Suitability of persons – IAIS Insurance Core Principles (ICPs)

6 controls
Controls in the ICP 5: Suitability of persons – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 6 controls
CodeTitle
iais-insurance-core-principles-icps::5.15.1 Legislation names who must meet suitability requirements
iais-insurance-core-principles-icps::5.25.2 Competence and integrity for Board, management and control functions; financial soundness and integrity for owners
iais-insurance-core-principles-icps::5.35.3 The insurer demonstrates suitability initially and on an ongoing basis, scaled to the role
iais-insurance-core-principles-icps::5.45.4 Notification of changes in key persons and of circumstances affecting suitability
iais-insurance-core-principles-icps::5.55.5 Rectifying action when a person no longer meets suitability requirements
iais-insurance-core-principles-icps::5.65.6 Information exchange with other authorities to check suitability

ICP 6: Changes in control and portfolio transfers – IAIS Insurance Core Principles (ICPs)

4 controls
Controls in the ICP 6: Changes in control and portfolio transfers – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 4 controls
CodeTitle
iais-insurance-core-principles-icps::6.16.1 Legislation defines control and provides oversight and enforcement of change-of-control requirements
iais-insurance-core-principles-icps::6.26.2 Notification of a proposed change of control; supervisory assessment and decision
iais-insurance-core-principles-icps::6.36.3 Supervisory approval for demutualisation or mutualisation
iais-insurance-core-principles-icps::6.46.4 Portfolio transfers assessed on the financial condition of both parties and the protection of both sets of policyholders

ICP 7: Corporate governance – IAIS Insurance Core Principles (ICPs)

11 controls
Controls in the ICP 7: Corporate governance – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 11 controls
CodeTitle
iais-insurance-core-principles-icps::7.17.1 Clear allocation of roles between Board, Senior Management and control functions; Board oversight of management
iais-insurance-core-principles-icps::7.107.10 Senior Management runs operations within the culture and strategy, promotes risk management, compliance and fair treatment, informs the Board and keeps orderly records
iais-insurance-core-principles-icps::7.117.11 The insurer demonstrates the adequacy and effectiveness of its governance framework
iais-insurance-core-principles-icps::7.27.2 The Board sets and oversees culture, objectives and strategy in the insurer's long-term interest
iais-insurance-core-principles-icps::7.37.3 Board composition, internal practices and powers adequate on an ongoing basis
iais-insurance-core-principles-icps::7.47.4 Individual Board Members' duties: good faith, care and diligence, the insurer's and policyholders' interests first, independent judgement, no undue advantage
iais-insurance-core-principles-icps::7.57.5 Board oversight of the design and implementation of risk management and internal controls
iais-insurance-core-principles-icps::7.67.6 A written remuneration policy that does not induce excessive risk-taking, covering the Board, management, control functions and major risk-takers
iais-insurance-core-principles-icps::7.77.7 A reliable financial reporting process with defined roles for Board, management and external auditor
iais-insurance-core-principles-icps::7.87.8 Governance and oversight of the external audit
iais-insurance-core-principles-icps::7.97.9 Systems for timely and effective communication with the supervisor on governance

ICP 8: Risk management and internal controls – IAIS Insurance Core Principles (ICPs)

8 controls
Controls in the ICP 8: Risk management and internal controls – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 8 controls
CodeTitle
iais-insurance-core-principles-icps::8.18.1 A documented risk management system: risk appetite strategy, risk policy for every material risk, timely response to profile changes
iais-insurance-core-principles-icps::8.28.2 A documented system of internal controls
iais-insurance-core-principles-icps::8.38.3 Control functions with authority, independence and resources
iais-insurance-core-principles-icps::8.48.4 A risk management function that identifies, assesses, monitors, mitigates and reports key risks and sustains a risk culture
iais-insurance-core-principles-icps::8.58.5 A compliance function that supports legal, regulatory and supervisory obligations and a compliance culture
iais-insurance-core-principles-icps::8.68.6 An actuarial function advising on technical provisions, pricing, capital adequacy, reinsurance and related compliance
iais-insurance-core-principles-icps::8.78.7 An internal audit function giving the Board independent assurance on the governance framework
iais-insurance-core-principles-icps::8.88.8 Undiminished oversight of and accountability for outsourced material activities

ICP 9: Supervisory review and reporting – IAIS Insurance Core Principles (ICPs)

7 controls
Controls in the ICP 9: Supervisory review and reporting – IAIS Insurance Core Principles (ICPs) domain of IAIS Insurance Core Principles (ICPs): 7 controls
CodeTitle
iais-insurance-core-principles-icps::9.19.1 A documented supervisory review and reporting framework, periodically reviewed
iais-insurance-core-principles-icps::9.29.2 Supervisory plans setting priorities and the depth of off-site monitoring and on-site inspection
iais-insurance-core-principles-icps::9.39.3 Outsourced material activities reviewed to the same level as in-house ones
iais-insurance-core-principles-icps::9.49.4 Documented regular reporting requirements: scope, frequency, accounting and audit standards, audited annual statements, material changes and incidents, corrections, additional reporting on demand
iais-insurance-core-principles-icps::9.59.5 Ongoing monitoring from communication, supervisory reporting and market information
iais-insurance-core-principles-icps::9.69.6 On-site inspections with a set objective, scope, timing and work programme
iais-insurance-core-principles-icps::9.79.7 Findings and needed measures discussed with the insurer as soon as practical

Your Compliance Coverage

If you comply with IAIS Insurance Core Principles (ICPs), you already cover:

MTCS (Singapore)

2%

5 controls mapped

Compare →

Singapore Government Instruction Manual on ICT&SS Management (IM8)

2%

5 controls mapped

Compare →

South Korea ISMS-P

2%

5 controls mapped

Compare →

+ 219 more: Authorised Economic Operator (AEO) Programmes - Global Standards (2%), NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security (2%)

See all 222 mapped frameworks ↓

Maps to 222 other frameworks

252 total controls
MTCS (Singapore)
5 source controls mapped|3 target controls covered
2%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
5 source controls mapped|4 target controls covered
2%
South Korea ISMS-P
5 source controls mapped|4 target controls covered
2%
Authorised Economic Operator (AEO) Programmes - Global Standards
5 source controls mapped|3 target controls covered
2%
NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security
4 source controls mapped|3 target controls covered
2%
New Zealand Information Security Manual (NZISM)
4 source controls mapped|3 target controls covered
2%
NERC CIP
4 source controls mapped|3 target controls covered
2%
IMO Maritime Cybersecurity Guidelines (MSC-FAL.1/Circ.3/Rev.4)
4 source controls mapped|2 target controls covered
2%
IEEE 1686
4 source controls mapped|3 target controls covered
2%
API 1164
4 source controls mapped|3 target controls covered
2%
IEC 62443
4 source controls mapped|3 target controls covered
2%
NIST SP 800-53 Rev 5
4 source controls mapped|5 target controls covered
2%
NIST Cybersecurity Framework 2.0
4 source controls mapped|6 target controls covered
2%
NIST SP 1800-32
4 source controls mapped|3 target controls covered
2%
Solvency II
4 source controls mapped|5 target controls covered
2%
ISO 28001:2007 Supply Chain Security Management
4 source controls mapped|3 target controls covered
2%
ISO/IEC 27019:2024
4 source controls mapped|3 target controls covered
2%
SASB Standards
3 source controls mapped|5 target controls covered
1%
PSD2 SCA
3 source controls mapped|2 target controls covered
1%
PIC/S Guide to Good Manufacturing Practice for Medicinal Products
3 source controls mapped|4 target controls covered
1%
OSFI B-13
3 source controls mapped|2 target controls covered
1%
Open Banking Security
3 source controls mapped|2 target controls covered
1%
O-RAN WG11 Security Specification
3 source controls mapped|4 target controls covered
1%
Monetary Authority of Singapore Technology Risk Management Guidelines
3 source controls mapped|2 target controls covered
1%
ICH Q10 - Pharmaceutical Quality System
3 source controls mapped|3 target controls covered
1%
German Supply Chain Due Diligence Act (LkSG)
3 source controls mapped|2 target controls covered
1%
IEC 60601-1 - Medical Electrical Equipment Safety
3 source controls mapped|4 target controls covered
1%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
3 source controls mapped|6 target controls covered
1%
FFIEC IT Examination Handbook
3 source controls mapped|4 target controls covered
1%
Annex 11 to EU GMP - Computerised Systems
3 source controls mapped|4 target controls covered
1%
UAE Virtual Asset Regulatory Authority (VARA) Regulations
3 source controls mapped|2 target controls covered
1%
FFIEC Cybersecurity Assessment Tool (CAT)
3 source controls mapped|3 target controls covered
1%
PCI P2PE
3 source controls mapped|4 target controls covered
1%
SSAE 18 - Attestation Standards (SOC Reporting)
3 source controls mapped|3 target controls covered
1%
ISO 22320:2018
3 source controls mapped|4 target controls covered
1%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
3 source controls mapped|4 target controls covered
1%
PCI PIN Security
3 source controls mapped|4 target controls covered
1%
ISO 20400:2017 - Sustainable Procurement
3 source controls mapped|3 target controls covered
1%
ISO/IEC 27003:2017
3 source controls mapped|2 target controls covered
1%
PCI SSF
3 source controls mapped|4 target controls covered
1%
ISO/IEC 23894:2023
3 source controls mapped|6 target controls covered
1%
IEC 62304:2015 Medical Device Software Lifecycle Processes
3 source controls mapped|6 target controls covered
1%
Kuwait National Cybersecurity Framework
3 source controls mapped|2 target controls covered
1%
Barbados Data Protection Act 2019
3 source controls mapped|3 target controls covered
1%
IFRS 17 - Insurance Contracts
3 source controls mapped|1 target controls covered
1%
AML/CTF Act 2006 (Australia)
2 source controls mapped|1 target controls covered
1%
UK AI Regulation Framework
2 source controls mapped|1 target controls covered
1%
SEC Climate Disclosure Rule
2 source controls mapped|1 target controls covered
1%
Own Risk and Solvency Assessment (ORSA) - NAIC Model Act
2 source controls mapped|1 target controls covered
1%
OECD Recommendation on Artificial Intelligence (2024 Update)
2 source controls mapped|1 target controls covered
1%
OECD AI Principles
2 source controls mapped|2 target controls covered
1%
OCC Heightened Standards (12 CFR Part 30, Appendix D)
2 source controls mapped|2 target controls covered
1%
NRF Cybersecurity and Data Privacy Framework (National Retail Federation)
2 source controls mapped|2 target controls covered
1%
NIST SP 800-39
2 source controls mapped|2 target controls covered
1%
NIST SP 800-37
2 source controls mapped|2 target controls covered
1%
NIST SP 800-30
2 source controls mapped|3 target controls covered
1%
NIST Privacy Framework
2 source controls mapped|3 target controls covered
1%
Lloyd's of London Cyber Insurance Requirements and Underwriting Standards
2 source controls mapped|1 target controls covered
1%
Japan AI Guidelines
2 source controls mapped|3 target controls covered
1%
IRM/AIRMIC/ALARM A Risk Management Standard (2002)
2 source controls mapped|1 target controls covered
1%
IEEE 7000
2 source controls mapped|2 target controls covered
1%
ICAO Annex 17 - Aviation Security (AVSEC)
2 source controls mapped|2 target controls covered
1%
Singapore AI Governance Framework
2 source controls mapped|1 target controls covered
1%
BS 65000:2014 - Guidance on Organizational Resilience
2 source controls mapped|2 target controls covered
1%
APRA CPS 230 Operational Risk Management
2 source controls mapped|3 target controls covered
1%
FBI CJIS Security Policy
2 source controls mapped|1 target controls covered
1%
APRA CPS 234
2 source controls mapped|2 target controls covered
1%
Aged Care Quality Standards 2019 (repealed edition)
2 source controls mapped|1 target controls covered
1%
AS9100D - Aerospace Quality Management System
2 source controls mapped|1 target controls covered
1%
SOC for Cybersecurity - Cybersecurity Risk Management Examination
2 source controls mapped|3 target controls covered
1%
Security of Critical Infrastructure Act 2018 (SOCI)
2 source controls mapped|3 target controls covered
1%
EASA Part-IS - Information Security in Aviation
2 source controls mapped|3 target controls covered
1%
APRA SPS 220 Risk Management (Superannuation)
2 source controls mapped|1 target controls covered
1%
Telecommunications Sector Security Reforms (TSSR)
2 source controls mapped|1 target controls covered
1%
TISAX - Trusted Information Security Assessment Exchange
2 source controls mapped|2 target controls covered
1%
ITAR - International Traffic in Arms Regulations
2 source controls mapped|3 target controls covered
1%
French Sapin II Law (Law No. 2016-1691)
2 source controls mapped|2 target controls covered
1%
Sweden Data Protection Act (Dataskyddslag, 2018:218)
2 source controls mapped|2 target controls covered
1%
ISO/IEC 29147:2018
2 source controls mapped|3 target controls covered
1%
NIST SP 800-146
2 source controls mapped|2 target controls covered
1%
NIST SP 800-145
2 source controls mapped|2 target controls covered
1%
NIST SP 800-144
2 source controls mapped|2 target controls covered
1%
ISMAP (Japan)
2 source controls mapped|2 target controls covered
1%
IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1)
2 source controls mapped|4 target controls covered
1%
Florida Digital Bill of Rights (FDBR)
2 source controls mapped|3 target controls covered
1%
ISO/IEC 27400:2022
2 source controls mapped|2 target controls covered
1%
Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018)
2 source controls mapped|3 target controls covered
1%
FedRAMP High
2 source controls mapped|3 target controls covered
1%
FedRAMP Moderate
2 source controls mapped|3 target controls covered
1%
UK Telecommunications (Security) Act 2021
2 source controls mapped|2 target controls covered
1%
NIST SP 800-190
2 source controls mapped|2 target controls covered
1%
US SEC Digital Assets and Crypto Regulatory Framework
2 source controls mapped|3 target controls covered
1%
NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity
2 source controls mapped|6 target controls covered
1%
UK GDPR (UK General Data Protection Regulation)
2 source controls mapped|2 target controls covered
1%
Regional Comprehensive Economic Partnership (RCEP) - E-Commerce Chapter
2 source controls mapped|2 target controls covered
1%
Nigeria Data Protection Act 2023 (NDPA)
2 source controls mapped|4 target controls covered
1%
Nebraska Data Privacy Act
2 source controls mapped|4 target controls covered
1%
South Korea PIPA
2 source controls mapped|2 target controls covered
1%
Israel Protection of Privacy Law (5741-1981)
2 source controls mapped|3 target controls covered
1%
Albania Law No. 124/2024 on Personal Data Protection
2 source controls mapped|3 target controls covered
1%
Azerbaijan Law on Personal Data (2010)
2 source controls mapped|2 target controls covered
1%
Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023)
2 source controls mapped|3 target controls covered
1%
Voluntary Principles on Security and Human Rights (VPs)
1 source controls mapped|1 target controls covered
0%
MiFID II / MiFIR
1 source controls mapped|1 target controls covered
0%
Kids Online Safety Act (KOSA)
1 source controls mapped|1 target controls covered
0%
UK Online Safety Act 2023
1 source controls mapped|2 target controls covered
0%
US OFAC Sanctions Compliance Framework
1 source controls mapped|4 target controls covered
0%
US Automated Commercial Environment (ACE) - CBP Trade Data Requirements
1 source controls mapped|1 target controls covered
0%
Uganda Data Protection and Privacy Act (2019)
1 source controls mapped|1 target controls covered
0%
Singapore Payment Services Act 2019
1 source controls mapped|1 target controls covered
0%
US ITAR and EAR - Export Control and Data Security
1 source controls mapped|1 target controls covered
0%
TSA Pipeline Cybersecurity Directives
1 source controls mapped|1 target controls covered
0%
Oman National Cybersecurity Framework
1 source controls mapped|1 target controls covered
0%
Japan FSA Cybersecurity Guidelines for Financial Institutions
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27006-1:2024
1 source controls mapped|1 target controls covered
0%
BSI IT-Grundschutz
1 source controls mapped|1 target controls covered
0%
ASD Strategies to Mitigate Cyber Security Incidents
1 source controls mapped|2 target controls covered
0%
WCAG 2.2
1 source controls mapped|1 target controls covered
0%
UK Gambling Commission LCCP and Remote Technical Standards
1 source controls mapped|2 target controls covered
0%
UK Bribery Act 2010
1 source controls mapped|3 target controls covered
0%
Trinidad and Tobago Data Protection Act 2011
1 source controls mapped|3 target controls covered
0%
Tanzania Personal Data Protection Act 2022
1 source controls mapped|2 target controls covered
0%
SLSA
1 source controls mapped|1 target controls covered
0%
SIG (Shared Assessments)
1 source controls mapped|1 target controls covered
0%
PTES
1 source controls mapped|1 target controls covered
0%
Philippines Cybercrime Prevention Act (RA 10175)
1 source controls mapped|1 target controls covered
0%
OWASP SAMM
1 source controls mapped|1 target controls covered
0%
OWASP MASVS
1 source controls mapped|1 target controls covered
0%
OpenSSF Scorecard
1 source controls mapped|1 target controls covered
0%
Notifiable Data Breaches Scheme (Australia)
1 source controls mapped|1 target controls covered
0%
NIST SP 800-92
1 source controls mapped|1 target controls covered
0%
NIST SP 800-88
1 source controls mapped|1 target controls covered
0%
NIST SP 800-63-4
1 source controls mapped|1 target controls covered
0%
NIST SP 800-61 Rev. 3
1 source controls mapped|1 target controls covered
0%
NIST SP 800-137
1 source controls mapped|1 target controls covered
0%
NIST SP 800-123
1 source controls mapped|1 target controls covered
0%
NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment)
1 source controls mapped|1 target controls covered
0%
NATO STANAG 4774 (Confidentiality Metadata Labels) and STANAG 4778 (Metadata Binding)
1 source controls mapped|2 target controls covered
0%
MITRE ATT&CK
1 source controls mapped|1 target controls covered
0%
ITU Radio Regulations and Space Security Standards
1 source controls mapped|1 target controls covered
0%
IATA Operational Safety Audit (IOSA) Standards Manual
1 source controls mapped|1 target controls covered
0%
FTC GLBA Safeguards Rule (16 CFR Part 314)
1 source controls mapped|1 target controls covered
0%
FDA Quality Management System Regulation (QMSR)
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27050-1:2019
1 source controls mapped|1 target controls covered
0%
PCI DSS 4.0
1 source controls mapped|1 target controls covered
0%
DFARS 252.204-7012 - Safeguarding Covered Defense Information
1 source controls mapped|1 target controls covered
0%
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27014:2020
1 source controls mapped|2 target controls covered
0%
Illinois Biometric Information Privacy Act (BIPA)
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27011:2024
1 source controls mapped|2 target controls covered
0%
ISO/IEC 27004:2016
1 source controls mapped|3 target controls covered
0%
ISO/IEC 30111:2019
1 source controls mapped|2 target controls covered
0%
DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition)
1 source controls mapped|3 target controls covered
0%
Connecticut Data Privacy Act (CTDPA)
1 source controls mapped|1 target controls covered
0%
COBIT 2019
1 source controls mapped|1 target controls covered
0%
ISO/IEC 29100:2024
1 source controls mapped|3 target controls covered
0%
US Foreign Corrupt Practices Act (FCPA)
1 source controls mapped|1 target controls covered
0%
FedRAMP Rev 5
1 source controls mapped|2 target controls covered
0%
ISO/IEC 23837:2023
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27031:2011
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27007:2020
1 source controls mapped|1 target controls covered
0%
ISO/IEC 29134:2023
1 source controls mapped|1 target controls covered
0%
IEC 62351 - Power Systems Communication Security
1 source controls mapped|1 target controls covered
0%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
1 source controls mapped|1 target controls covered
0%
ASIS SPC.1-2009 - Organizational Resilience Standard
1 source controls mapped|1 target controls covered
0%
Science Based Targets Initiative (SBTi) - Net-Zero Standard
1 source controls mapped|2 target controls covered
0%
ISO/IEC 29115:2013 - Entity Authentication Assurance Framework
1 source controls mapped|1 target controls covered
0%
ISO/IEC 27043:2015
1 source controls mapped|1 target controls covered
0%
NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices
1 source controls mapped|3 target controls covered
0%
ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3)
1 source controls mapped|1 target controls covered
0%
ISO/IEC 17025:2017 - General Requirements for Testing and Calibration
1 source controls mapped|2 target controls covered
0%
SOC 2
1 source controls mapped|2 target controls covered
0%
ISO 8000 - Data Quality
1 source controls mapped|2 target controls covered
0%
SANS Incident Handler's Handbook and PICERL Methodology
1 source controls mapped|2 target controls covered
0%
ISO/IEC 25012:2008 - Data Quality Model
1 source controls mapped|2 target controls covered
0%
ISO/SAE 21434
1 source controls mapped|1 target controls covered
0%
ISO 56002
1 source controls mapped|2 target controls covered
0%
ISO 19650 - Organisation and Digitisation of Information about Buildings and Civil Engineering Works (BIM)
1 source controls mapped|3 target controls covered
0%
Singapore Cybersecurity Act 2018
1 source controls mapped|1 target controls covered
0%
UK Open Banking Standard
1 source controls mapped|1 target controls covered
0%
AICPA Privacy Management Framework (PMF)
1 source controls mapped|2 target controls covered
0%
ISO 41001:2018 - Facility Management Systems
1 source controls mapped|2 target controls covered
0%
Automotive SPICE (ASPICE) v4.1 - Process Assessment Model
1 source controls mapped|2 target controls covered
0%
Rhode Island Data Transparency and Privacy Protection Act (RIDTPPA)
1 source controls mapped|1 target controls covered
0%
ISO 26262:2018 - Functional Safety for Road Vehicles
1 source controls mapped|1 target controls covered
0%
WHO Global Strategy on Digital Health 2020-2025
1 source controls mapped|1 target controls covered
0%
GDPR
1 source controls mapped|1 target controls covered
0%
Virginia CDPA
1 source controls mapped|1 target controls covered
0%
Vietnam PDPD
1 source controls mapped|1 target controls covered
0%
Uruguay DPL
1 source controls mapped|1 target controls covered
0%
Turkey KVKK
1 source controls mapped|1 target controls covered
0%
Texas Data Privacy and Security Act (TDPSA)
1 source controls mapped|1 target controls covered
0%
Taiwan PDPA
1 source controls mapped|1 target controls covered
0%
Qatar DPL
1 source controls mapped|1 target controls covered
0%
Privacy Act 2020
1 source controls mapped|1 target controls covered
0%
POPIA
1 source controls mapped|1 target controls covered
0%
Personal Data Act (personopplysningsloven)
1 source controls mapped|1 target controls covered
0%
PDPA Thailand
1 source controls mapped|1 target controls covered
0%
PDPA Singapore
1 source controls mapped|1 target controls covered
0%
Oregon Consumer Privacy Act
1 source controls mapped|1 target controls covered
0%
NIST SP 800-122
1 source controls mapped|1 target controls covered
0%
Nigeria Data Protection Regulation (NDPR)
1 source controls mapped|1 target controls covered
0%
New Jersey Data Privacy Act
1 source controls mapped|1 target controls covered
0%
New Hampshire Data Privacy Act
1 source controls mapped|1 target controls covered
0%
Montana Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
0%
Minnesota Consumer Data Privacy Act
1 source controls mapped|1 target controls covered
0%
Mexico LFPDPPP
1 source controls mapped|1 target controls covered
0%
Mauritius DPA
1 source controls mapped|1 target controls covered
0%
Maryland Online Data Privacy Act of 2024
1 source controls mapped|1 target controls covered
0%
Malaysia PDPA 2010
1 source controls mapped|1 target controls covered
0%
Liechtenstein DPA
1 source controls mapped|1 target controls covered
0%
LGPD
1 source controls mapped|1 target controls covered
0%
Kentucky Consumer Data Protection Act
1 source controls mapped|1 target controls covered
0%
Jamaica Data Protection Act 2020
1 source controls mapped|1 target controls covered
0%
Indiana Consumer Data Protection Act
1 source controls mapped|1 target controls covered
0%
Iceland Data Protection and Processing of Personal Data Act (Act No. 90/2018)
1 source controls mapped|1 target controls covered
0%
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
1 source controls mapped|1 target controls covered
0%
Australian Privacy Principles (APPs)
1 source controls mapped|1 target controls covered
0%
Bahrain PDPL
1 source controls mapped|1 target controls covered
0%
Armenia Law on Protection of Personal Data (2015)
1 source controls mapped|1 target controls covered
0%
Saudi Arabia PDPL
1 source controls mapped|1 target controls covered
0%
UK Data Protection Act 2018
1 source controls mapped|1 target controls covered
0%
Compare IAIS Insurance Core Principles (ICPs) with MTCS (Singapore)

Coverage is not the same as your position

This page shows what IAIS Insurance Core Principles (ICPs) overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.

The Compliance Position Diagnostic, $5,000 fixed, ten business days

What is IAIS Insurance Core Principles (ICPs) and who does it apply to?

IAIS Insurance Core Principles (ICPs) is a compliance framework from International (IAIS members; assessed by the IMF and World Bank under the FSAP) with 24 domains and 205 controls. The International Association of Insurance Supervisors (IAIS) Insurance Core Principles (ICPs) provide a globally accepted framework for the supervision of the insurance sector. The 26 ICPs cover licensing, governance, risk management, conduct of business, group supervision, and cross-border cooperation. They serve as the benchmark for insurance regulation globally and are assessed by the IMF and World Bank as part of Financial Sector Assessment Programs (FSAPs). It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.

What does IAIS Insurance Core Principles (ICPs) actually require?

IAIS Insurance Core Principles (ICPs) has 205 controls organised across 24 domains. The largest domains are ICP 17: Capital adequacy – IAIS Insurance Core Principles (ICPs) (18 controls), ICP 16: Enterprise risk management for solvency purposes – IAIS Insurance Core Principles (ICPs) (16 controls), ICP 12: Exit from the market and resolution – IAIS Insurance Core Principles (ICPs) (14 controls). Each control defines specific requirements that organisations must implement to achieve compliance.

If I already comply with another framework, how much of IAIS Insurance Core Principles (ICPs) do I already cover?

IAIS Insurance Core Principles (ICPs) maps to 222 other compliance frameworks. The top mapping partners are MTCS (Singapore) (2% coverage), Singapore Government Instruction Manual on ICT&SS Management (IM8) (2% coverage), South Korea ISMS-P (2% coverage). Use our comparison tool to explore control-level mappings between frameworks.

How do I implement IAIS Insurance Core Principles (ICPs)?

Start your IAIS Insurance Core Principles (ICPs) compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about IAIS Insurance Core Principles (ICPs) requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 205 controls and track your progress.

Start Your Compliance Journey

Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,121 frameworks.

Get Started Free →

Free forever, no credit card required