risk management methods used by insurance companies