An insurer or health maintenance organization shall maintain a risk management framework to assist the insurer with identifying, assessing, monitoring, managing and reporting on its material and relevant risks. This requirement may be satisfied if the insurance group of which the insurer or health maintenance organization is a member maintains a risk management framework applicable to the operations of the insurer or health maintenance organization.