Enterprise risk management (ERM)...
a. Is required for all insurance companies
b. Is less stringent than earlier governance models
c. Is simple even for complexly structured health plans
d. Must be established for an entire health plan, not just the insurer component