Back to Frameworks
Solvency II
European Union and EEA
vDirective 2009/138/EC consolidated 17 January 2025; Delegated Regulation (EU) 2015/35 consolidated 2 August 2022; 2025 review (Directive (EU) 2025/2, Delegated Regulation (EU) 2026/269) published, applying from 30 January 2027
15 domains
60 controls
Solvency II, the EU prudential regime for insurers and reinsurers: what undertakings must do under Directive 2009/138/EC and Delegated Regulation 2015/35 across the three pillars (capital and valuation, governance and ORSA, reporting and disclosure) and group supervision, modelled article by article from the current consolidated texts, with the 2025 review's new duties (proportionality classification, sustainability and climate analysis, liquidity plans, two-part audited SFCR, new deadlines) recorded as published and applying from 30 January 2027.
Verified
Solvency II is a compliance framework from European Union and EEA with 15 domains and 60 controls that map to 68 other frameworks. The largest domains are Pillar 2: system of governance – Solvency II (13 controls), 2025 review (Directive (EU) 2025/2): duties applying from 30 January 2027 – Solvency II (11 controls), Pillar 1: valuation and technical provisions – Solvency II (5 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (15)
2025 review (Directive (EU) 2025/2): duties applying from 30 January 2027 – Solvency II
11 controls
| Code | Title |
|---|---|
| solvency-ii::R25-Art.132 | Art. 132(5) to (8) (from 30 January 2027) Reflect macroeconomic developments, sustainability and, on request, macroprudential concerns in investment strategy |
| solvency-ii::R25-Art.144a | Arts 139, 144a as amended and inserted (from 30 January 2027) Keep a liquidity risk management plan and report MCR breaches whenever observed |
| solvency-ii::R25-Art.29a | Arts 29a to 29e (from 30 January 2027) Classify as a small and non-complex undertaking by notification, and track the criteria |
| solvency-ii::R25-Art.308f | Arts 308c to 308f as amended (from 30 January 2027) Disclose dependency on transitional measures; new transitionals only in narrow cases |
| solvency-ii::R25-Art.35 | Arts 35(5a), 35a, 35b (from 30 January 2027) Meet the new reporting cycle and deadlines |
| solvency-ii::R25-Art.40-42 | Arts 40, 41, 42 as amended (from 30 January 2027) Strengthen board composition, diversity, key function separation and notifications |
| solvency-ii::R25-Art.44 | Art. 44(2), (2b) to (2e) as amended (from 30 January 2027) Manage sustainability risks with plans, quantifiable targets and disclosure; cover cybersecurity |
| solvency-ii::R25-Art.45 | Arts 45, 45a as amended (from 30 January 2027) Extend the ORSA to macroeconomic, macroprudential, liquidity and climate scenario analysis |
| solvency-ii::R25-Art.51 | Arts 51, 51a (from 30 January 2027) Publish a two-part SFCR within 18 weeks and have its balance sheet audited |
| solvency-ii::R25-Art.77 | Arts 77, 77a, 77d, 105a, 109 as amended (from 30 January 2027) Apply the revised valuation, risk margin, volatility adjustment, equity and simplification rules |
| solvency-ii::R25-Group | Arts 246, 246a, 254(3), 256, 256b, 256c as amended and inserted (from 30 January 2027) Meet the strengthened group governance, liquidity, reporting and audit duties |
Authorisation and qualifying holdings – Solvency II
2 controls
| Code | Title |
|---|---|
| solvency-ii::Art.14-23 | Arts 14, 18, 23 Obtain prior authorisation and meet the conditions, with a scheme of operations |
| solvency-ii::Art.57 | Arts 57 to 59 Notify the supervisor before acquiring, increasing or disposing of a qualifying holding |
Branches and freedom to provide services – Solvency II
2 controls
| Code | Title |
|---|---|
| solvency-ii::Art.145 | Arts 145, 146 Notify the home supervisor before establishing a branch, and give notice of changes |
| solvency-ii::Art.147 | Arts 147 to 149 Notify before providing services cross-border and before changing them |
Group supervision – Solvency II
4 controls
| Code | Title |
|---|---|
| solvency-ii::Art.218-219 | Arts 218, 219 Ensure group eligible own funds cover the group SCR, calculated annually and monitored |
| solvency-ii::Art.244-245 | Arts 244, 245 Report significant risk concentrations and intra-group transactions to the group supervisor |
| solvency-ii::Art.246 | Art. 246 Apply the governance requirements at group level and run a group ORSA |
| solvency-ii::Art.254-256 | Arts 254 to 257 Share group information, publish a group SFCR and keep holding company managers fit and proper |
Information for policy holders – Solvency II
2 controls
| Code | Title |
|---|---|
| solvency-ii::Art.183-184 | Arts 183, 184 Give non-life policy holders pre-contract information on law, complaints and establishment |
| solvency-ii::Art.185-186 | Arts 185, 186 Give life policy holders full pre-contract and ongoing information, and honour the cancellation period |
Pillar 1: Minimum Capital Requirement – Solvency II
1 controls
| Code | Title |
|---|---|
| solvency-ii::Art.128-129 | Arts 128, 129 Hold eligible basic own funds covering the MCR, calculated quarterly |
Pillar 1: Solvency Capital Requirement – Solvency II
4 controls
| Code | Title |
|---|---|
| solvency-ii::Art.100-102 | Arts 100 to 102 Hold eligible own funds covering the SCR, calculated at least annually and monitored continuously |
| solvency-ii::Art.103-109 | Arts 103 to 105, 108 to 110 Calculate the standard formula correctly, with approval for undertaking-specific parameters |
| solvency-ii::Art.112-118 | Arts 112 to 118; Art. 44(5) Apply for internal model approval and govern model changes |
| solvency-ii::Art.120-126 | Arts 120 to 126 Meet the use test and the statistical, calibration, attribution, validation and documentation standards |
Pillar 1: investments (prudent person principle) – Solvency II
1 controls
| Code | Title |
|---|---|
| solvency-ii::Art.132 | Art. 132; DR Arts 260(1)(c), 275a Invest all assets under the prudent person principle |
Pillar 1: long-term guarantee and transitional measures – Solvency II
3 controls
| Code | Title |
|---|---|
| solvency-ii::Art.308c-e | Arts 308c to 308e Use transitional measures only with approval, disclose them and follow a phasing-in plan |
| solvency-ii::Art.77b | Art. 77b Apply the matching adjustment only with approval and while every condition holds |
| solvency-ii::Art.77d | Art. 77d Apply the volatility adjustment consistently, with approval where the Member State requires it |
Pillar 1: own funds – Solvency II
3 controls
| Code | Title |
|---|---|
| solvency-ii::Art.87-90 | Arts 87 to 90 Determine own funds and obtain approval for ancillary own funds |
| solvency-ii::Art.93-96 | Arts 93 to 97 Classify own-fund items into tiers, with approval for unlisted items |
| solvency-ii::Art.98 | Art. 98 Apply the tier eligibility limits to cover the SCR and MCR |
Pillar 1: valuation and technical provisions – Solvency II
5 controls
| Code | Title |
|---|---|
| solvency-ii::Art.75 | Art. 75; DR Arts 263, 267 Value assets and liabilities on an economic basis, under internal control |
| solvency-ii::Art.76-77 | Arts 76, 77 Establish technical provisions as best estimate plus risk margin, market-consistently |
| solvency-ii::Art.78-80 | Arts 78 to 80 Include expenses, inflation, bonuses, options and guarantees; segment by risk group |
| solvency-ii::Art.81 | Art. 81 Calculate reinsurance and SPV recoverables with a counterparty default adjustment |
| solvency-ii::Art.82-84 | Arts 82 to 84; DR Arts 264, 265 Assure data quality, validate against experience and document technical provisions |
Pillar 2: own risk and solvency assessment – Solvency II
1 controls
| Code | Title |
|---|---|
| solvency-ii::Art.45 | Art. 45; DR Arts 262, 306, 312(1)(b) Conduct the ORSA regularly and after significant change, and report its results |
Pillar 2: system of governance – Solvency II
13 controls
| Code | Title |
|---|---|
| solvency-ii::Art.40 | Art. 40 Board holds ultimate responsibility for compliance |
| solvency-ii::Art.41 | Art. 41(1), (2); DR Art. 258 Maintain an effective, proportionate system of governance |
| solvency-ii::Art.41(3) | Art. 41(3); DR Art. 258(2) Keep board-approved written policies, reviewed at least annually |
| solvency-ii::Art.41(4) | Art. 41(4); DR Art. 258(3) Ensure continuity and regularity, with ICT managed under DORA |
| solvency-ii::Art.42 | Art. 42; DR Art. 273 Keep those who run the undertaking or hold key functions fit and proper, and notify changes |
| solvency-ii::Art.44 | Art. 44(1) to (3); DR Arts 259, 260 Run an integrated risk-management system across all prescribed areas |
| solvency-ii::Art.44(2a) | Art. 44(2), (2a) Assess ALM sensitivities and keep a liquidity plan where long-term guarantee adjustments are used |
| solvency-ii::Art.44(4) | Art. 44(4), (4a); DR Arts 268, 269 Establish an independent risk-management function |
| solvency-ii::Art.46 | Art. 46; DR Arts 266, 270 Maintain an internal control system and a compliance function |
| solvency-ii::Art.47 | Art. 47; DR Art. 271 Provide an objective, independent internal audit function |
| solvency-ii::Art.48 | Art. 48; DR Art. 272 Provide an actuarial function with an annual written report |
| solvency-ii::Art.49 | Art. 49; DR Art. 274 Outsource without losing responsibility, with prior notification and a compliant contract |
| solvency-ii::DR275 | DR Arts 258(1)(l), 275 Adopt a risk-aligned written remuneration policy |
Pillar 3: supervisory reporting and public disclosure – Solvency II
5 controls
| Code | Title |
|---|---|
| solvency-ii::Art.35 | Art. 35; DR Arts 304, 305, 312 Submit supervisory information: RSR, ORSA report and quantitative templates |
| solvency-ii::Art.51 | Art. 51; DR Arts 290 to 297 Publish an annual solvency and financial condition report with the prescribed content |
| solvency-ii::Art.53-54 | Arts 53, 54; DR Arts 299, 302 Handle permitted non-disclosure and publish updates after major developments |
| solvency-ii::Art.55 | Art. 55; DR Arts 300, 301 Approve, publish on time and keep the SFCR available |
| solvency-ii::Art.72 | Art. 72 Statutory auditors: report material facts promptly to the supervisor |
Undertakings in difficulty – Solvency II
3 controls
| Code | Title |
|---|---|
| solvency-ii::Art.136 | Art. 136 Identify deteriorating financial conditions and notify the supervisor immediately |
| solvency-ii::Art.138 | Arts 138, 142 On SCR breach: inform immediately, file a recovery plan within two months, restore within six |
| solvency-ii::Art.139 | Arts 139, 142, 144 On MCR breach: inform immediately, file a finance scheme within one month, restore within three |
Your Compliance Coverage
If you comply with Solvency II, you already cover:
SASB Standards
6%
6 controls mapped
Compare →Authorised Economic Operator (AEO) Programmes - Global Standards
6%
6 controls mapped
Compare →IAIS Insurance Core Principles (ICPs)
5%
5 controls mapped
Compare →+ 65 more: SSAE 18 - Attestation Standards (SOC Reporting) (5%), NIST Cybersecurity Framework 2.0 (4%)
See all 68 mapped frameworks ↓Maps to 68 other frameworks
94 total controls
SASB Standards
6 source controls mapped|6 target controls covered
6%
Authorised Economic Operator (AEO) Programmes - Global Standards
6 source controls mapped|4 target controls covered
6%
IAIS Insurance Core Principles (ICPs)
5 source controls mapped|4 target controls covered
5%
SSAE 18 - Attestation Standards (SOC Reporting)
5 source controls mapped|2 target controls covered
5%
NIST Cybersecurity Framework 2.0
4 source controls mapped|5 target controls covered
4%
NIST SP 1800-32
4 source controls mapped|3 target controls covered
4%
APRA CPS 230 Operational Risk Management
4 source controls mapped|5 target controls covered
4%
NIST SP 800-53 Rev 5
4 source controls mapped|3 target controls covered
4%
ISO/IEC 23894:2023
4 source controls mapped|4 target controls covered
4%
ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence
4 source controls mapped|3 target controls covered
4%
ISO/IEC 27003:2017
4 source controls mapped|3 target controls covered
4%
AS9100D - Aerospace Quality Management System
4 source controls mapped|2 target controls covered
4%
ISO 28001:2007 Supply Chain Security Management
4 source controls mapped|3 target controls covered
4%
ISO 20400:2017 - Sustainable Procurement
4 source controls mapped|4 target controls covered
4%
South Korea ISMS-P
4 source controls mapped|2 target controls covered
4%
Annex 11 to EU GMP - Computerised Systems
4 source controls mapped|2 target controls covered
4%
API 1164
4 source controls mapped|3 target controls covered
4%
FBI CJIS Security Policy
4 source controls mapped|1 target controls covered
4%
ISO/IEC 27019:2024
4 source controls mapped|4 target controls covered
4%
IEC 62443
4 source controls mapped|3 target controls covered
4%
Singapore Government Instruction Manual on ICT&SS Management (IM8)
4 source controls mapped|1 target controls covered
4%
Security of Critical Infrastructure Act 2018 (SOCI)
4 source controls mapped|4 target controls covered
4%
TISAX - Trusted Information Security Assessment Exchange
4 source controls mapped|4 target controls covered
4%
UK AI Regulation Framework
3 source controls mapped|1 target controls covered
3%
ICAO Annex 17 - Aviation Security (AVSEC)
3 source controls mapped|1 target controls covered
3%
PCI PIN Security
3 source controls mapped|3 target controls covered
3%
ISO/IEC 27557:2022 - Organisational Privacy Risk Management
3 source controls mapped|5 target controls covered
3%
FFIEC IT Examination Handbook
3 source controls mapped|3 target controls covered
3%
IEC 62304:2015 Medical Device Software Lifecycle Processes
3 source controls mapped|3 target controls covered
3%
IEC 60601-1 - Medical Electrical Equipment Safety
3 source controls mapped|3 target controls covered
3%
APRA CPS 234
3 source controls mapped|2 target controls covered
3%
Aged Care Quality Standards 2019 (repealed edition)
3 source controls mapped|1 target controls covered
3%
Singapore AI Governance Framework
3 source controls mapped|1 target controls covered
3%
PCI P2PE
3 source controls mapped|3 target controls covered
3%
BS 65000:2014 - Guidance on Organizational Resilience
3 source controls mapped|2 target controls covered
3%
Kuwait National Cybersecurity Framework
3 source controls mapped|1 target controls covered
3%
ISO 22320:2018
3 source controls mapped|1 target controls covered
3%
EASA Part-IS - Information Security in Aviation
3 source controls mapped|3 target controls covered
3%
PCI SSF
3 source controls mapped|3 target controls covered
3%
AML/CTF Act 2006 (Australia)
3 source controls mapped|1 target controls covered
3%
UAE Virtual Asset Regulatory Authority (VARA) Regulations
3 source controls mapped|1 target controls covered
3%
FFIEC Cybersecurity Assessment Tool (CAT)
3 source controls mapped|2 target controls covered
3%
SOC for Cybersecurity - Cybersecurity Risk Management Examination
3 source controls mapped|3 target controls covered
3%
APRA SPS 220 Risk Management (Superannuation)
3 source controls mapped|1 target controls covered
3%
Telecommunications Sector Security Reforms (TSSR)
3 source controls mapped|1 target controls covered
3%
Protective Security Policy Framework (PSPF) Release 2026
3 source controls mapped|1 target controls covered
3%
UK FCA/PRA Operational Resilience Framework
3 source controls mapped|1 target controls covered
3%
ISO 41001:2018 - Facility Management Systems
3 source controls mapped|1 target controls covered
3%
Responsible Minerals Initiative (RMI) - Responsible Minerals Assurance Process
3 source controls mapped|3 target controls covered
3%
ISO/IEC 27011:2024
3 source controls mapped|1 target controls covered
3%
UK Security and Emergency Measures Direction (SEMD) - Water Industry
3 source controls mapped|1 target controls covered
3%
Space ISAC (Information Sharing and Analysis Center) - Threat Framework
3 source controls mapped|1 target controls covered
3%
ISO/IEC 27010:2015
3 source controls mapped|1 target controls covered
3%
21 CFR Part 211 - Current Good Manufacturing Practice
3 source controls mapped|1 target controls covered
3%
BREEAM - Building Research Establishment Environmental Assessment Method
3 source controls mapped|1 target controls covered
3%
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0
3 source controls mapped|2 target controls covered
3%
Automotive SPICE (ASPICE) v4.1 - Process Assessment Model
3 source controls mapped|1 target controls covered
3%
ISO 50001:2018 - Energy Management Systems
3 source controls mapped|1 target controls covered
3%
ISO/TS 22318:2021
3 source controls mapped|1 target controls covered
3%
ISO/TS 22317:2021
3 source controls mapped|1 target controls covered
3%
NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices
3 source controls mapped|1 target controls covered
3%
SQF Code Edition 9 - Safe Quality Food
3 source controls mapped|1 target controls covered
3%
ISO 26000:2010
3 source controls mapped|1 target controls covered
3%
ISO 22316
3 source controls mapped|1 target controls covered
3%
Sigstore - Software Artifact Signing and Verification
3 source controls mapped|1 target controls covered
3%
UK Telecommunications (Security) Act 2021
3 source controls mapped|1 target controls covered
3%
Science Based Targets Initiative (SBTi) - Net-Zero Standard
2 source controls mapped|1 target controls covered
2%
COSO Internal Control - Integrated Framework (2013)
2 source controls mapped|2 target controls covered
2%
Coverage is not the same as your position
This page shows what Solvency II overlaps with in general. Where your organisation actually stands, against the standard you are going for and the certifications you already hold, is a different question. Same graph and the same recorded refutations, scoped to you rather than to a pair.
The Compliance Position Diagnostic, $5,000 fixed, ten business daysWhat is Solvency II and who does it apply to?
Solvency II is a compliance framework from European Union and EEA with 15 domains and 60 controls. Solvency II, the EU prudential regime for insurers and reinsurers: what undertakings must do under Directive 2009/138/EC and Delegated Regulation 2015/35 across the three pillars (capital and valuation, governance and ORSA, reporting and disclosure) and group supervision, modelled article by article from the current consolidated texts, with the 2025 review's new duties (proportionality classification, sustainability and climate analysis, liquidity plans, two-part audited SFCR, new deadlines) recorded as published and applying from 30 January 2027. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does Solvency II actually require?
Solvency II has 60 controls organised across 15 domains. The largest domains are Pillar 2: system of governance – Solvency II (13 controls), 2025 review (Directive (EU) 2025/2): duties applying from 30 January 2027 – Solvency II (11 controls), Pillar 1: valuation and technical provisions – Solvency II (5 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of Solvency II do I already cover?
Solvency II maps to 68 other compliance frameworks. The top mapping partners are SASB Standards (6% coverage), Authorised Economic Operator (AEO) Programmes - Global Standards (6% coverage), IAIS Insurance Core Principles (ICPs) (5% coverage). Use our comparison tool to explore control-level mappings between frameworks.
How do I implement Solvency II?
Start your Solvency II compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about Solvency II requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 60 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,120 frameworks.
Get Started Free →Free forever, no credit card required