(6)Credit institutions and financial institutions should be able to demonstrate to their competent authority that the extent of additional measures they have taken is appropriate in view of the money laundering and terrorist financing risk. However, should the competent authority consider that the additional measures a credit institution or financial institution has taken are insufficient to manage that risk, the competent authority should be able to direct the credit institution or financial institution to take specific measures to ensure the credit institution's or financial institution's compliance with its anti-money laundering and countering the financing of terrorism obligations.