The insurers risk policies should be written in a way to help
employees understand their risk responsibilities. They should also
help explain the relationship of the risk management system to the
insurers overall governance framework and to its corporate culture.