Investment firm licensees must maintain systems and controls that are, in the opinion of the CBB, adequate for the scale and complexity of their activities. These systems and controls must meet the minimum requirements contained in Modules HC (High Level Controls) and RM (Risk Management), as specified for the category of investment firm license held.