FIs and DNFBPs shall apply due diligence measures, and determine the extent of due diligence measures, on the basis of TF risks, to its customers and the business relationship, and shall apply enhanced due diligence measures when the TF risks are high. The Implementing Regulation shall set forth the instances in which such measures shall be taken and the types of measures to be taken.