(32)It is appropriate to take account of the characteristics and needs of smaller obliged entities, and to ensure treatment which is appropriate to their specific needs, and the nature of the business. That might include exempting certain obliged entities from performing a risk assessment where the risks involved in the sector in which the entity operates are well understood.