1. Creation and authority. The Department of Administrative and Financial Services is designated as the agency through which this chapter is administered. The State Controller is empowered with such authority as necessary to carry out the purposes of this chapter.

2. State Controller. The commissioner shall direct the State Controller to administer the State’s policy on insurance management, as developed through the authority of this chapter. The State Controller or the State Controller’s designee must be knowledgeable of insurance practices and principles and must be qualified by actual experience in the field of risk management to carry out the purposes of this chapter.

3. Personnel. The State Controller may employ such assistants and employees as are necessary, and distribute the risk management duties among such persons as the State Controller considers necessary for economy and efficiency of administration. Employees are subject to the Civil Service Law.