The examination procedures
instruct examiners to review the UIEGA risk assessment. That means if you have one, they need to look at it. It does not mean you are required to have one.
There simply is no realistic way to assess the "risk" at the bank level. Customer by customer, maybe.
In this world you must be oh so smart or oh so pleasant. Well, for years I was smart. I recommend pleasant.