With regulators putting a tighter focus on insurers' duty towards their customers, Michael Tripp discusses the questions that risk managers should be asking of the business