# AML/CFT programme: Anti-money laundering and counter-terrorist financing compliance programme

> A risk-based AML/CFT programme: risk assessment, CDD, monitoring, screening, reporting, training and independent testing.

URL: https://securei3.com/standards/aml-cft-programme/
Category: Financial crime, fraud & AML: Law or regulation
Provider: Secure iQube (independent consultancy; ISO certificates are issued by accredited certification bodies; SOC and ISAE reports by licensed CPA and audit firms, which Secure iQube can arrange through partner firms)


Every regulated financial business needs an AML/CFT programme built on a documented business-wide risk assessment. We design and review programmes against FATF standards and local law, India’s PMLA and RBI KYC rules, UAE and Saudi AML laws, and the EU AML package.

- Enterprise-wide money laundering and terrorist financing risk assessment
- Customer due diligence, enhanced due diligence and beneficial ownership
- Transaction monitoring scenarios and tuning
- Suspicious transaction reporting workflows
- Training and independent AML audits

## Who it is for

- Banks, NBFCs, payment and fintech companies
- Virtual asset service providers
- Designated non-financial businesses and professions

## Benefits

- Supervisor-ready programmes
- Monitoring that finds real risk, not noise

## How Secure iQube helps

1. **Applicability and scoping**: Confirm whether and how the law applies to you, entities, data, systems, roles and territories.
2. **Data and process mapping**: Build a record of processing or control inventory so obligations can be tied to real systems and owners.
3. **Gap assessment**: Measure current practice against each obligation and rank the gaps by legal and business risk.
4. **Remediation roadmap**: Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.
5. **Evidence and ongoing monitoring**: A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

## Frequently asked questions

### How often should an AML risk assessment be updated?

At least annually and whenever there is a significant change in products, customers, channels or geographies, or in the regulatory environment.

Related: https://securei3.com/standards/india-pmla/, https://securei3.com/standards/uae-aml/, https://securei3.com/standards/ksa-aml/, https://securei3.com/standards/fatf-recommendations/

Contact: https://securei3.com/contact/: info@securei3.com