An overall risk assessment should include determining the potential risks presented by product, service, transaction or the delivery channel of the investment firm licensee. A licensee should assess, using a RBA, the extent to which the offering of its product, service, transaction or the delivery channel presents potential vulnerabilities to placement, layering or integration of criminal proceeds into the financial system.