In addressing risk, management must consider whether risk-sharing vehicles such as insurance are appropriate. Cost benefit analyses must be undertaken to identify appropriate vehicles. Selected vehicles should be designed to reflect the individual characteristics and potential risks of the organization. In the case of insurance policies, management should assign responsibility for maintaining compliance with the terms of the policy.