Which is the most significant risk associated with KYC requirements being considered a low priority not designed into processes and subsequently implemented after the products are already launched?
Findings from a financial institution's (Fl's) regulatory examination suggest that several unidentified risks pose a serious threat. The Fl identifies the risks and implements a set of controls to mitigate those risks. Which type of risk considers the controls' effectiveness?
While reviewing a sample of trade financing documents in a financial institution, an auditor notes that there were instances of potential overvaluation and undervaluation of goods. The auditor intends to check if these were detected and escalated. Which is a reason for such overvaluation and undervaluation?
If a final audit communication contains a significant error, the chief audit executive must:
Which should be evaluated when analyzing components of risk mitigation in an AML risk assessment? (Select Two.)
Which does a financial institution (FI) need to do when outsourcing an independent audit?
Which should the external auditor recommend to ensure that the institution did not facilitate transactions involving a sanctioned person?
During the auditing process the auditor finds that the entity never updates the customers risk assessment. Which remediation actions should the auditor suggest? (Select Two.)
Which are objectives of the issue confirmation step in the audit issue management process? (Select Two.)
Independent testing of the New York branch of a foreign bank is conducted by an outsourced audit firm. The independent testing report should be submitted to which authority in order to provide appropriate level of governance and oversight?
When reviewing an entity's sanctions compliance program, the auditor should ensure who is exempt from the Office of Foreign Assets Control's regulations?
An audit finding can be closed when:
Which are methods to test internal controls related to the CDD and KYC process? (Select Two.)
When sample testing client transaction records, the auditor finds that a client offered to sell a piece of art on a commission basis. A sale was completed and the purchase price was remitted to the client with less commission. What further investigation should the auditor undertake?
Audits are designed to provide assurance that what key aspect of risk management framework is adequately designed and functioning effectively?
Which should be incorporated into an AML compliance policy? (Select Three.)
Which factors should be taken into consideration in designing a follow-up strategy when remedial action needs to be taken due to deficiencies identified in an AML audit?
Which is considered a minimum requirement in a customer identification program?
An auditor should present exceptions identified during testing to the auditee after.
Suspicious activity report testing in the last three audits did not identify any metrics to indicate that volume vanes dramatically each month. Which step should the auditor take next?
During the interview, the local director informs the audit manager that no internal or regulatory audits have occurred since the local director's appointment The local director relies on a locally-approved independent external review of Company A performed 12 months ago by a local firm How should the audit manager respond?
Which is a true statement about the computer-assisted audit tool (CAAT)?
A financial institution utilizes an automated daily validation report to validate the accuracy of the data flowing into its monitoring software. An auditor is responsible for testing the data used to create the report. This is an example of testing which type of effectiveness?
When assessing the KYC process which should an auditor observe from the customer risk assessment? (Select Two)
The company has automated the completion of the customer risk assessment (CRA) into its main customer relationship management (CRM) system The CRM has needs recording the overall risk level assessed (Standard. Enhanced), the ID number of the staff member who completed the assessment, and me date of the last assessment Which additional fields should the auditor recommend to document the CRA process? (Select Three.)
During a sanction review, an auditor notes that several of the bank's large corporate clients continue to route transactions through the bank to certain Office of Foreign AssetsControl (OFAC)-sanctioned countries.The head of corporate clients stated that these transactions were executed under the OFAC license.What should an auditor know to distinguish between an OFAC general license and a specific license?
When reviewing changes to the organizational structure of an AML department, which factor should an auditor assess?