Biannually, management teams are required to report to the Insurance & Enterprise Risk department their most significant risks, along with assessments and an overview of implemented mitigations and next milestones .