Member States shall require all insurance and reinsurance undertakings to have in place an effective system of governance which provides for sound and prudent management of the business.

That system shall at least include an adequate transparent organisational structure with a clear allocation and appropriate segregation of responsibilities and an effective system for ensuring the transmission of information. It shall include compliance with the requirements laid down in Articles 42 to 49.

The system of governance shall be subject to regular internal review.

The system of governance shall be proportionate to the nature, scale and complexity of the operations of the insurance or reinsurance undertaking.

Insurance and reinsurance undertakings shall have written policies in relation to at least risk management, internal control, internal audit and, where relevant, outsourcing. They shall ensure that those policies are implemented.

Those written policies shall be reviewed at least annually. They shall be subject to prior approval by the administrative, management or supervisory body and be adapted in view of any significant change in the system or area concerned.

Insurance and reinsurance undertakings shall take reasonable steps to ensure continuity and regularity in the performance of their activities, including the development of contingency plans. To that end, the undertakings shall employ appropriate and proportionate systems, resources and procedures, and shall, in particular, set up and manage network and information systems in accordance with Regulation (EU) 2022/2554 of the European Parliament and of the Council ( 7 ).

The supervisory authorities shall have appropriate means, methods and powers for verifying the system of governance of the insurance and reinsurance undertakings and for evaluating emerging risks identified by those undertakings which may affect their financial soundness.

The Member States shall ensure that the supervisory authorities have the powers necessary to require that the system of governance be improved and strengthened to ensure compliance with the requirements set out in Articles 42 to 49.