A Relevant Person must document, and provide to the Regulator on request, any of the following:
(a) the risk assessment of its business undertaken under Rule 6.1.1;
(b) how the assessment in (a) was used for the purposes of complying with Rule 7.2.1(1);
(c) the risk assessment of the Customer undertaken under Rule 7.2.1(1)(a); and
(d) the determination made under Rule 7.2.1(1)(b).