Can anyone tell me if you have a separate risk assessment for Reg GG? We have an upcoming exam and this is on the list of items to provide. How could you prepare a risk assessment for something you don't allow?

How did the review pan out? It seems to me that while you may have controls in place to not allow it, there may be opportunities in which it occurs. Said another way, do you check to ensure the controls in place are working, thus assess the risk.