CRICO assessments are conducted by the patient safety department within their own captive insurer, with no punitive component.