An insurer shall maintain a risk management framework to assist the insurer in identifying, assessing, monitoring, managing, and reporting on its material and relevant risks. This requirement is satisfied if the insurer is a member of an insurance holding company system that maintains a risk management framework applicable to the operations of the insurer.