Enterprise risk screen

Business-wide risk assessment readiness

Check whether the ML/TF assessment covers the listed risk factors, approval, refresh, and evidence ownership.

Saved answers stay in closed lists: activity_band, role_band, kind_band, base_band, article_band, delay_band, documented_band, party_band, product_band, geo_band, channel_band, txn_band, sanctions_band, approval_band, refresh_band, owner_band, lead_band, manager_band, officer_band, independence_band, resource_band, escalate_band, policy_band, training_band, testing_band, fiu_band, relation_band, occasional_band, value_band, cash_band, linked_band, gambling_band, doubt_band, veracity_band, nation_band, entity_info_band, control_map_band, who_process_band, source_process_band, mismatch_band, arrangement_band, retention_band, update_band, plan_scope_band, plan_role_band, plan_risk_band, plan_policy_band, plan_function_band, plan_cdd_band, plan_cash_band, plan_report_band, plan_training_band, plan_retention_band, plan_nation_band, plan_ready_band, plan_delay_band

Is the risk assessment documented?Are party-risk factors covered?Are product and service risks covered?Is geographic risk covered?Is delivery-channel risk covered?Are transaction-risk factors covered?Are targeted financial sanctions considered?Is management approval recorded?Is there a review and update process?Is evidence ownership assigned?

What the risk screen checks

It looks for a documented assessment, party, product, geography, channel, and transaction factors, plus targeted financial sanctions, management approval, a refresh process, and an evidence owner. It does not score the firm as high risk.

Who should use it

Risk owners and compliance leads preparing the business-wide assessment before 2027-07-10.

How results work

Missing documentation is an evidence gap. A missing approval, owner, refresh, or sanctions step is action required. Unknown sanctions go to a specialist. The screen never issues a legal risk rating.

What this checks

Regulation (EU) 2024/1624 applies generally from 2027-07-10. Article 3(3)(n) and (o) categories apply from 2029-07-10. The regulation is directly applicable, and a Member State may keep a stricter rule where the regulation allows it. The EU large-cash baseline is EUR 10,000 and linked transactions count. A gambling figure of EUR 2,000 applies only to the specified activity.

Official sources

Read the risk-assessment provisions in Regulation (EU) 2024/1624. AMLA guidance and Commission AML/CFT notes, once issued, are review triggers only.

Limitations

No names, narratives, or case files are stored. The result is readiness, not a finding about any person or payment.

Using the risk screen

Cover the factor set

Party, product, geography, channel, and transaction factors each need their own yes or no.

Keep sanctions separate

If sanctions consideration is unknown, the screen stops at specialist review instead of a ready mark.

Name an evidence owner

A missing owner or refresh is work to do, not a passing grade.

Risk questions

Does this rate the business?

No. It checks whether the assessment file exists and covers the listed factors.

What if sanctions are unclear?

Choose unknown. The result is specialist review, not a ready state.

Is a narrative stored?

No. Only the closed yes, no, or unknown answers and the ruleset version are kept.

What does ready mean?

Every listed risk factor, sanctions, approval, refresh, and owner is marked yes.