Where an assessment, based on the criteria stipulated in Paragraph SIO-4.3.3, by the CBB, indicates a significant degree of business risk, the CBB may, at its sole discretion, may impose remedial measures as deemed appropriate to address the risk.