fTLD is ultimately responsible for enforcing the Security Requirements and policies in .INSURANCE. Registrars will also play a role in enforcement of Registrant Security Requirements as they have a direct relationship with the Registrant. fTLD retains the right to take action if the Registrar or Registrant  fails to do so.