I feel like the extent of insurance company “audits” tends to be overstated. Most of the time they want executive attestations that X, Y, and Z are happening. W

I feel like the extent of insurance company “audits” tends to be overstated. Most of the time they want executive attestations that X, Y, and Z are happening. Whether and to what extent X, Y, and Z actually are happening isn’t something the insurance company is likely to investigate unless and until a claim is submitted under the policy. The insurance company doesn’t necessarily care that X, Y, and Z happen they care about mitigating risk. Specifically, their risk of paying out on the policy.