The company has automated the completion of the customer risk assessment (CRA) into its main customer relationship management (CRM) system The CRM has needs recording the overall risk level assessed (Standard. Enhanced), the ID number of the staff member who completed the assessment, and me date of the last assessment Which additional fields should the auditor recommend to document the CRA process? (Select Three.)
During a sanction review, an auditor notes that several of the bank's large corporate clients continue to route transactions through the bank to certain Office of Foreign AssetsControl (OFAC)-sanctioned countries.The head of corporate clients stated that these transactions were executed under the OFAC license.What should an auditor know to distinguish between an OFAC general license and a specific license?
When reviewing changes to the organizational structure of an AML department, which factor should an auditor assess?