Licensees must have appropriate risk management systems to determine whether a customer is a Politically Exposed Person ('PEP'), both at the time of establishing business relations and thereafter on a periodic basis. Licensees must utilise publicly available databases and information to establish whether a customer is a PEP.