Category 4 investment firms must maintain systems and controls that are, in the opinion of the CBB, commensurate with the scale and complexity of their activities. These systems and controls must meet the minimum requirements contained in this Module and with respect to financial crime risks, Module FC (Financial Crime).