The commissioner may adopt rules establishing standards to ensure that an affiliated company is able to exercise control of the risk management function of any controlled unaffiliated business to be insured by the captive insurance company. Until rules under this section are adopted, the commissioner may approve the coverage of these risks by a captive insurance company.