What are the 4 pillars
What is the first line of defense
effective policies, procedures, and internal controls
what do these three parts do
define and support the entire AML/CFT program, while at the same time, act as a blueprint that outlines how an institution is fulfilling its regulatory requirements
What is the second line of defense
the compliance function/designated BSA officer
Why is it the second line of defense
the compliance function is responsible for monitoring the controls of the business
can the compliance function be designated with a one size fits all mentality
no
why
no two institutions will have exactly the same compliance structure because the risk facing each institution is going to be different as identified in their respective risk assessments
what are the five factors in which the sophistication of the compliance function should be based upon
the institutions:
in most cases what is the BOD responsible for
appointing a qualified individual as an institution’s AML/CFT Officer
what is this compliance officer responsible for
managing all aspects of the AML/CFT compliance program
what can these duties consist of (5 items)
what should an effective AML/CFT training program do
explain the relevant AML/CFT laws and regulations
Cover the institutions’ policies and procedures used to mitigate money laundering risks
what is the first steep in designing an effective AML/CFT training program
identify the target audience
will the topics to train be the same at every institution?
no, they will vary
what are the matters that should be factored into training
general background and history pertaining to money laundering controls, including the definitions of money laundering and terrorist financing, why criminals do it, and why stopping them is important
legal framework on what aml/cft laws aply to institutions and their employees
penalties for violations
how should training occur
What are the three key aspects of training to determine
it should be ongoing and on a regular schedule
What is the third line of defense
independent audit
who must perform it
people not involved with the organizations AML/CFT compliance staff
why must it be independent
to ensure its effectiveness and to look for new risk factors
who should those performing the audit report to
BOD or to a designated board committee composed primarily/completely of outside directors
what must be created at a company
a culture of compliance
What are the four measures that FATF recommends institutions incorporate into their CDD programs
what should occur with higher risk customers and their transactions
should be reviewed even more closely at account opening and more frequently during their account relationships
what should the bank do to verify the identify of the customer
use reliable, independent source documents, data or information