E&S risk policies, which are updated a minimum of every three years, seek to identify sectors, clients and business activities exposed to E&S issues, apply enhanced due diligence and escalation procedures, and establish requirements to manage, mitigate and monitor E&S risk.