Why audit won’t save your anti-money laundering (AML) program
In financial institutions across the United States, there’s a reflex that’s become almost ritual.
When a regulator walks in, or a board member asks whether the AML program is working, the answer is the same: “We just passed audit.” It’s delivered with confidence, sometimes even pride, as if the risk has been neutralized. But passing audit doesn’t mean your program is safe.
It doesn’t mean it’s effective. And in today’s threat landscape, it doesn’t mean much of anything at all.
Related articles
-
OpinionDecision Debt: The silent crisis undermining compliance and governance
Decision debt is the practice of leaving key compliance decisions unresolved, and it is a crisis few compliance leaders are willing to name. Some of the world’s largest financial institutions, including Wells Fargo and Citibank, have learned this lesson the hard way.
-
ArticleDigital wallets should speed up compliance, but companies must focus on trust and security
The EU has one, the U.K. is getting one, many U.S. states are working with Google and Apple to provide one, and now industry sectors are developing their own digital wallet.
-
OpinionFive best practices for conducting effective investigations
Companies face rising pressure to detect misconduct early. Strong internal investigations identify compliance issues, uphold regulations, and protect credibility.
More from Opinion
-
OpinionEvidentiary Debt: The blind spot liability
On a gray Tuesday morning, the audit seemed routine. A stack of binders sat on the table, the compliance officer was confident, and the regulator’s tone was cordial. Then came the question that changed everything.
-
OpinionKristy Grant-Hart: Why I Chose to Be a Compliance and Ethics Officer
When people ask me why I chose to be a compliance and ethics officer, my answer is simple: because what we do changes the world.
-
OpinionCarrie Penman: Putting the “E” back in ethics and compliance
When I first stepped into this profession, my title was not “Chief Compliance Officer.” It was “Ethics Officer.” At Westinghouse, I was tasked with launching a program that, at the time, felt experimental: a global, enterprise-wide ethics initiative built not on rules, but on values. I traded in my career ...