conduct an assessment to establish the level and nature of risks attributed to significant business relationships. Assessments can be carried out prior to commercial arrangements being established or for existing commercial arrangements where risks are identified.