(1) An insurer shall establish and maintain a risk management framework to assist the insurer with identifying, assessing, monitoring, managing, and reporting on the insurer's material and relevant risks.
(2) An insurer may satisfy subsection (a) of this section if the insurance group that the insurer is a member of maintains a risk management framework that is applicable to the operations of the insurer.