What Happens When the Risk Changes Faster Than the Policy?

Insurance has always been a forward-looking business. Insurers use historical experience, data, modeling, expertise, and judgment to understand risks that may occur months or years into the future. But what happens when tomorrow’s risks begin to look fundamentally different from yesterday’s?

That challenge is becoming increasingly important as insurers confront risks created or intensified by artificial intelligence, cyber threats, extreme weather, geopolitical instability, economic volatility, changing technologies, and new forms of liability. Many of these risks do not exist independently. They interact, evolve, and sometimes emerge faster than traditional insurance products and historical models were designed to accommodate.

The 2026 Emerging Risks Survey from the Society of Actuaries and Casualty Actuarial Society illustrates how quickly the landscape is shifting. Among C-suite respondents, financial volatility ranked as the leading near-term emerging risk, followed by geoeconomic and globalization shifts and extreme weather. Looking three or more years ahead, however, 60% identified technological and economic risks as having the greatest potential impact, with adverse outcomes from artificial intelligence and financial volatility among the leading concerns.

For insurance leaders, the challenge isn’t simply identifying the next risk. It is making sure the organization can continue providing meaningful protection when the nature of risk itself changes.

Yesterday’s Data Can’t Describe Every Risk Tomorrow Will Create

Historical data is fundamental to insurance. Past losses help insurers understand frequency, severity, correlations, pricing, reserves, and potential future exposure.

But emerging risks introduce a difficult problem: sometimes there isn’t enough history.

Deloitte’s research on the future of insurance describes an industry facing technological disruption alongside new types of risk with limited historical precedent. Looking toward 2035, Deloitte expects insurers to contend with increasingly complex combinations of climate, technology, health, economic, and societal risks while customers expect protection to evolve alongside them.

Artificial intelligence provides a particularly clear example. AI can change productivity, underwriting, claims, customer service, and fraud detection within insurance organizations, but it can also create entirely new exposures that policies must eventually address.

In August 2026, Reuters reported that cyber insurers were already examining how policies should respond when autonomous AI agents cause damage. Traditional cyber coverage often assumes a recognizable event such as unauthorized access or malicious activity. But an AI agent may have legitimate authorization to access a system and still behave unexpectedly, creating losses without fitting neatly into traditional definitions of a cyberattack.

The customer’s need for protection hasn’t disappeared. The path the risk takes has changed.

Emerging Risks Can Become Emerging Protection Gaps

When risk changes faster than insurance solutions can adapt, the consequence can extend beyond the insurer. It can create a growing gap between the losses individuals and businesses face and the protection available to help absorb them.

Research from Bain & Company points to widening protection gaps across multiple areas of insurance. In natural catastrophes, for example, Bain estimates that only approximately 25% to 33% of losses may be insured by 2030. Its analysis also identifies evolving exposures involving cyber risk, climate change, autonomous and electric vehicles, and other emerging risks that could challenge traditional insurance models.

Affordability matters here, too. An exposure can technically be insurable while becoming increasingly difficult for customers to afford. Insurers therefore have to balance competing responsibilities: providing relevant protection, accurately understanding the risk, pricing it sustainably, maintaining financial strength, and responding to customer needs.

That makes innovation more than an opportunity to launch new products. In some cases, it may be necessary to keep the fundamental value proposition of insurance relevant.

The Target Can Stay Steady While the Playbook Changes

Walter Bond’s Make Progress framework provides a useful distinction for leaders navigating this kind of change: the difference between the Target and the Playbook.

For insurers, the Target can remain remarkably consistent. The industry exists to help individuals and organizations understand, manage, transfer, and recover from risks they cannot—or do not want to—carry entirely on their own.

But the Playbook used to accomplish that Target cannot remain static when the risks themselves evolve.

Products may need to change. Underwriting models may need different information. Pricing approaches may evolve. Claims processes may encounter scenarios that weren’t contemplated when existing procedures were created. Technology can change how risk is identified and monitored. Prevention and mitigation services can become part of the value insurers provide before a loss occurs.

Deloitte anticipates some of these changes as it looks toward 2035, including more adaptive and modular insurance products and a broader role for insurers that extends beyond traditional risk transfer toward prevention, resilience, and long-term financial security.

That doesn’t mean insurers should chase every new technology or rewrite their strategy whenever a new risk appears. It means they need enough clarity about the Target to recognize when the existing Playbook is no longer producing it.

Protection Can Begin Before the Loss

One of the most interesting implications of a changing risk environment is that the future of insurance may involve helping customers avoid or reduce losses rather than only compensating them afterward.

Technology already makes it increasingly possible to identify some risks earlier. Sensors can detect conditions before property damage becomes severe. Data can identify patterns associated with fraud. Connected devices can provide information about driving behavior or equipment performance. Cybersecurity tools can identify vulnerabilities before they become breaches.

Not every risk can be prevented, of course. Insurance will continue to play its traditional role of transferring and pooling risk. But prevention and mitigation can become additional ways to create value, particularly as some exposures become more severe or expensive to insure.

That represents a meaningful evolution in the Playbook. The relationship can begin to shift from “We’ll help make you whole after something happens” toward “We’ll also help you reduce the likelihood or severity of what could happen.”

The Target—protection—hasn’t changed. The methods available to produce it have expanded.

An Adaptable Playbook Still Needs an Aligned Roster

None of this happens through products and technology alone. Emerging risks require people who can recognize change, evaluate its implications, communicate across functions, exercise judgment, and translate new information into action.

That makes the Roster an important part of the industry’s ability to adapt.

Underwriting, actuarial, claims, distribution, technology, risk, legal, compliance, and leadership teams may see different parts of an emerging exposure. If those perspectives remain isolated, organizations can struggle to understand the complete risk or respond consistently.

The more interconnected risks become, the more important organizational alignment becomes. Leaders need people who understand the Target, know their role in the Playbook, and can adjust their execution as new information becomes available.

Adaptability is therefore not simply the ability to change a product. It is the organization’s ability to recognize when change is necessary and then execute that change effectively.

The Policy Has to Keep Up With the Promise

Insurance will never eliminate uncertainty. That isn’t its purpose.

Its purpose is to help people and organizations live, invest, operate, build, and grow despite uncertainty by providing protection against risks they cannot reasonably absorb alone.

As those risks evolve, the industry faces a continuing challenge. Yesterday’s products, models, definitions, and processes may not always provide the protection tomorrow’s customers need.

That doesn’t require abandoning the fundamentals of insurance. It requires protecting them.

The Target remains meaningful protection. The Playbook has to evolve with the risk. And the Roster has to be capable of executing what comes next.

Because when the risk changes faster than the policy, progress depends on whether the organization is willing and able to change the Playbook before the promise of protection falls behind.