(67)In carrying out its functions under Directives 2009/65/EC and 2011/61/EU, ESMA should take a risk-based approach.