N.Y. Comp. Codes R. & Regs. tit. 11, § 82.3
(a) Except as provided in subdivision (c) of this section, a domestic insurer shall conduct regularly an own risk and solvency assessment consistent with the process set forth in the ORSA guidance manual. A domestic insurer also shall conduct an ORSA any time there are significant changes to the domestic insurer’s risk profile, but no less than annually. A domestic insurer may satisfy this subdivision if the holding company system, article 16 system, or article 17 system of which it is a member conducts an ORSA consistent with this subdivision.
(3) An ORSA summary report shall include the signature of the chief risk officer or other executive having responsibility for the oversight of the enterprise risk management function, attesting to the best of his or her knowledge and belief that the domestic insurer or another member of the domestic insurer’s holding company system, article 16 system, or article 17 system applies the enterprise risk management function described in the ORSA summary report and that a copy of the report has been provided to the domestic insurer’s or member’s board of directors or the appropriate committee thereof, or if there is no board of directors, then to the insurer’s or member’s governing body.
(c)
(1) A domestic insurer shall be exempt from this section if:
(5) Notwithstanding the exemptions stated in this subdivision the superintendent may require that a domestic insurer conduct an ORSA and file an ORSA summary report:
(b)