Depending on the nature, scale and complexity of its business, an investment firm licensee should consider having a separate risk management function. The CBB will only consider a licensee not having a separate function, where its trading activities are limited in scale and complexity, and appropriate mitigating controls are in place.