The BMA would typically invoke Rule CA-1.1.2 in rare circumstances — for instance, where in its assessment a licensee was running high levels of operational risk because of a particularly weak controls environment.