Posts

Showing posts from September, 2021

Assessing the Risk Categories

  In a previous newsletter I spoke on three basic steps required when conducting a risk-based approach risk assessment of your business. Step one was to assess the risk of the four different categories within your business which include clients, products, countries, and channels. The second step was to determine what your business’ risk appetite is. And the final step is to review your internal controls. In today’s article we will look a bit more in detail at how to assess your business’ clients, products, countries, and channels. The first category we have are your clients. Remember to keep in mind that you want to tailor your risk assessment based on your institution or firm. All businesses are different and will require different policies, procedures, and controls based on who and what you are dealing with. Let’s start with an easy enough question in terms of your customer base; Who are your customers? Sounds simple enough, but you’ll need to dig to find out information on who y...

Cyber security risk analysis

Image
  Cybersecurity article series: Cybersecurity risk analysis Staff training Detecting a breach and immediate action Recovering from a breach Cybersecurity risk analysis The first in our series of articles on cybersecurity will cover aspects of risk analysis for your business. Risk analysis is something that everyone in the world of regulatory compliance and AML is familiar with and deals with every day. For the most part though, our focus tends to be on external risks like new clients, businesses and industry practices. When performing a risk analysis on our assets in relation to cybersecurity, we must also have a clear focus on internal threats.