Capital Market Service Providers must take reasonable care to establish and maintain appropriate systems and controls for compliance with the requirements of this Module and to limit their vulnerability to financial crime. These systems and controls must be documented and approved, and reviewed annually by the Board of the Capital Market Service Provider. The documentation, and the Board's review and approval, must be made available upon request to the CBB.