A Capital Market Service Provider must implement and maintain appropriate policies and procedures to conduct risk assessment of its customers during the establishment of the business relationship as well as throughout the course of that relationship.