you should pick a company or organization and do a complete risk management analysis of it, using an ERM format which should include business risks that are beyond the typically scope of insurance.
For your chosen company or organization you should:
- identify the top 3-5 risks that it faces,
- describe them including a quantification of the cost of risk, and
- suggest how the company should manage those risks.
Your risk management analysis may include insurance type risks if they are in the top 3-4 risks faced by the organization.
(An example of this would be medical malpractice risks faced by a health care organization or Workers Compensation risks faced by a large construction firm).