R+V Versicherung AG Annual Report

Provision for IT risks:
In the IT area, the security of programs and
data and the ability to ensure ongoing operations
is guaranteed by comprehensive
access controls and safety precautions.
A particular risk would be the partial or
complete failure of the IT systems. The R+V
Group has made provisions against this by
establishing two separate data centers,
each with special access protection, sensitive
fire protection measures and a secure
power supply based on emergency power
generators. A defined restart procedure to
be used in the event of a disaster is tested
for its effectiveness in exercises on a regular
basis. Data is stored in different R+V
buildings in high security areas as well as at
additional external locations. The telecoms
infrastructure has been designed with a
high level of redundancy, both internally
within buildings and with regard to external
network access.
Quality assurance for the IT systems is
provided by way of established problem
and change management processes. All
events of relevance to services are recorded
and tracked in accordance with their
significance. Current topics are dealt with in
daily conferences and allocated processing
priority. Monthly service control meetings
attended by all IT division heads are held to
escalate problems and take countermeasures
when fixed thresholds in relation to
system availability and response times are
exceeded.
28
Risk provisions for major projects and
investments:
The R+V Group has laid down binding procedures
for the planning and implementation
of projects and investments. In line with
these specifications, an investment committee
regularly examines major projects and
investments, paying particular attention to
events, problems and (counter)measures,
as well as adherence to budgets. Necessary
changes are implemented immediately.
These are also coordinated with the risk
conference committee.
Summary of the risk situation
The instruments and methods of analysis
outlined here show that R+V Versicherung
AG has a comprehensive system that satisfies
the risk identification and analysis
requirements needed for efficient risk management.
To date, it has not identified any
developments that could have a material
long-term effect on the Company’s net
assets, financial position and results of
operations.