As per the Prevention of Money Laundering Act, 2002- reporting entities under the RBI, SEBI, IRDA and PFRDA must perform Risk rating, prior to commencement of the relationship with their client.
You may also visit Knowledge Hub to understand more about the regulations on the Risk Categorisation.