Where a licensee maintains a separate risk management function, this function must be independent of risk-taking units and must report to the Board and senior management on all material risks to the licensee. It must also document the process by which it identifies and monitors material risks, and how it reports to the Board and senior management on these risks.