Not clear why the losses should follow lognormal distribution rather than some less pleasant to work with distribution like Cauchy.

Also not clear why loss frequency is assumed to be independent from loss magnitude.

Instead of "percent chance that the loss will exceed X" (VaR), expected shortfall would be more useful.