• whether the Company has formally assessed and documented the Company’s business in the QFC and its vulnerability to money laundering and terrorist financing considering its customers, products, services, technologies and geographic scope (business risk assessment);