The regulator issued finalised guidance requiring firms to adopt a risk-based approach for managing payment services. This document mandates the implementation of tailored risk assessment protocols to identify, monitor, and mitigate operational and financial threats. Firms must integrate these requirements into their compliance structures and reporting mechanisms to ensure ongoing regulatory adherence.