Compliance officer, senior manager · 6 steps · recorded 17 October 2026 · click any step to jump the video there

1. 0:04

   Open your risk profile

   Your risk profile is Part 1 of your AML/CTF program: eAML lists the money laundering and terrorism financing risk factors for your business type, and for each one you decide whether it is within your organisation’s risk appetite, and what you will do about it if it is not. The card at the top shows how many you have assessed.

2. 0:26

   Read a risk factor

   Factors are grouped: country, customer type, delivery channel, service and so on. Each shows what the risk is, its inherent rating (how risky it is before any control), and whether you have assessed it yet. The question on the right is always the same: is this within our risk appetite?

3. 0:45

   Within appetite: answer Yes and save

   Yes means you accept this risk as it is, with no additional control. Nothing else is needed: select Save and the factor shows Within appetite and Saved.

4. 0:58

   Outside appetite: choose a control

   No means you are not comfortable with this risk without something done about it. You then choose one or more standard controls, or describe your own. The standard controls are: accept without additional controls, apply enhanced customer due diligence, require source of funds or wealth verification, require payment by bank transfer, require senior manager approval, decline to provide the service, and offboard the customer if they do not comply. Select Save to record it.

5. 1:23

   Apply all: the rest in one step

   If most of the remaining factors are within your appetite, Apply all marks every factor you have not assessed as Within appetite and saves them. Factors you have already assessed are left exactly as they are, and a factor you have set to No but not finished is left for you to complete. You can change any of them afterwards.

6. 1:45

   Every factor assessed

   The card at the top now says every risk factor has been assessed. Come back to it whenever your business changes: new services, new customer types, new jurisdictions.