Md. Code, Insurance § 32–103

(a) Each carrier subject to this title shall maintain a risk management framework for identifying, assessing, monitoring, managing, and reporting its material and relevant risks.

(b) A carrier may satisfy this requirement if the insurance group of which the carrier is a member maintains a risk management framework that applies to the operations of the carrier.