I cannot over emphasize this point as a professional. Inaitwa assessing the Risk Profile. 
1. Is there any reputational risk involved?
2. Is there any compliance risk?
3. What financial risks have been disclosed?
4. Are there any operational risks due to the nature of the b/s?