Investment firm licensees must have appropriate risk management systems to determine whether a customer is a Politically Exposed Person ('PEP'), both at the time of establishing business relations and thereafter on a periodic basis. Investment firm licensees must utilize publicly available databases and information to establish whether a customer is a PEP.