What questions would you ask to better understand a customer's risk profile during the CDD process?