Capital Market Service Providers must have appropriate risk management systems to determine whether a customer is a Politically Exposed Person ('PEP'), both at the time of establishing business relations and thereafter on a periodic basis. Capital Market Service Providers must utilise publicly available databases and information to establish whether a customer is a PEP.