A Capital Market Service Provider must conduct additional risk assessments as may be required by the CBB, which may include expanding relevant risk factors or increasing the frequency of reviews.