A capital market licensee must also review and update the customers’ risk profile based on their level of ML/TF/PF risk upon onboarding and regularly throughout the life of the relationship. The risk management and mitigation measures implemented by a capital market licensee must be commensurate with the risk profile of the customer or type of customer.