The risk reporting and monitoring systems of category 4 investment firms must be independent of the employees who are responsible for exposing the licensee to risk.