Completing the Client Risk Assessment (CRA)
The CRA process typically involves two steps. However, if the client work involves a non-captured activity, you can skip Step 1 and proceed directly to Step 2.
- Step 1 – Completing the CRA questionnaire.
Open the client maintenance program and load the client record. To display the CRA questionnaire, right-click and select Risk Assessment from the context.

For each question, select Y (Yes), N (No), or leave the field blank if the answer is unknown. You can return later to complete or update the form as needed. All responses and supporting details will be saved for future reference, with an audit log tracking the username, as well as the dates of completion, modifications, and CO approval.
Your responses should clearly justify the overall risk rating. Use the Are there any other factors field to elaborate on your reasoning and provide supporting evidence.
The CRA assessment will automatically suggest an overall risk level and this risk level will be applied to the client unless you override it as described in Step 2. If you choose to override, ensure you document the reason for the change in the Are there any other factors field.
Click OK to save the assessment, returning to the client maintenance program to continue your process. At this point, you may override the suggested risk level if needed.
- Step 2 – Setting the CRA level.
There are four levels of risk: Unspecified, Exempt, Standard, and High.
- Unspecified: Indicates that one or more questions have not been answered.
- Exempt: Applies when all client work is classified as a Non-Captured Activity.
- Standard: Reflects that the answers indicate the client poses a standard level of risk.
- High: Indicates the client is considered higher risk, requiring enhanced due diligence.

If the client work involves a non-captured activity, select Exempt from the Risk Level dropdown menu. If you have completed the questionnaire, the CRA will automatically reflect the risk level based on your responses.
To override the suggested risk level, choose the appropriate option from the Risk Level dropdown menu.
Click Save before exiting client maintenance to ensure the CRA record is properly saved and created.