A newly appointed CRO at a mid-sized insurer discovers that although a comprehensive risk management framework was formally adopted two years ago, business unit managers routinely bypass risk assessment procedures when launching new products, viewing them as an administrative burden imposed by the risk function. Executive leadership expresses surprise, believing the framework was operating effectively. Which action by the CRO would MOST effectively address the underlying governance weakness?