Upon request of the director, the ultimate controlling person of every insurer subject to registration shall file an annual enterprise risk report. The report shall be appropriate to the nature, scale, and complexity of the operations of the insurance holding company and shall, to the best of the ultimate controlling person’s knowledge and belief, identify the material risks within the insurance holding company system, if any, that could pose enterprise risk to the insurer. The report shall be filed with the lead state insurance commissioner of the insurance holding company system as determined by procedures within the Financial Analysis Handbook adopted by the National Association of Insurance Commissioners. The first enterprise risk report shall be due and filed no later than May 1, 2016, and annually thereafter by the first day of May each year, unless the lead state insurance commissioner extends the time for filing for good cause shown.