The AML Enterprise-Wide Risk Assessment: Method and Template
Every AML programme is required to rest on a documented risk assessment, and most firms produce one that would not survive a determined examiner. This guide covers the artefact itself — how inherent risk is scored, how control effectiveness is evidenced rather than asserted, and how residual risk connects to the controls it is supposed to justify.


