(a) Inherent risks in the new product, service, or activity;

(b) Changes to the licensee's operational risk profile and appetite and tolerance, including the risk of existing products or activities;

(c) The necessary controls, risk management processes, and risk mitigation strategies;

(d) The residual risk;

(e) Changes to relevant risk thresholds or limits; and

(f) The procedures and metrics to measure, monitor, and manage the risk of the new product or activity.