(1) An insurer shall maintain a risk management framework to assist the insurer with identifying, assessing, monitoring, managing, and reporting on its material and relevant risks.
(2) The requirement of subsection (1) of this section may be satisfied if the insurance group of which the insurer is a member maintains a risk management framework applicable to the operations of the insurer.