Licensees must maintain the assessment report along with the steps taken to mitigate the risks referred to in Paragraph CRA-5.2.8 for a period of 5 years.