For the purposes of Paragraph C4-4.1.2 and as per Paragraph C4-2.1.10, category 4 investment firms may outsource its risk management function to a third party, provided CBB prior approval is obtained.