As with all of FinCEN's regulations requiring the establishment of AML programs, RMLOs are required to implement risk-based programs that take into account the unique risks associated with the RMLO's products and services, as well as the RMLO's size, market, and other issues.