天美影院

During a compliance intervention, you should ensure that the business has internal controls in place to monitor and manage its compliance with The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations (MLR 2017).听听听

The requirements for internal controls are set out in 听MLR 2017.听ive examples:听

• Ensure customer identification and acceptance procedures reflect the risk characteristics of customers.
• To identify when a customer or beneficial owner is a politically exposed person听(PEP) and ensure additional controls are in place for approving transactions with them.听
• Systems are capable of picking up and flagging warning signs of potentially suspicious activity.听
• Systems can identify when transactions are with or through high-risk third countries and the business is taking additional measures to manage and lessen the risk.

You need to check the business is carrying out regular assessments of its internal controls and systems to make sure they are working. You should consider:听

• Who is responsible for checking that the internal controls are working?听
• Does the business have an internal audit department?听
• If so, how often are checks carried out?听
• Does the business have any reports? (You may want to ask to see the latest report).听
• Has the business had any external audits done?听 If so, you may want to ask about their findings and any actions the business has taken following this.听

You should also consider who is appointed as the nominated officer and compliance officer where necessary to ensure they can carry out their role/s effectively.听

What the business does to monitor compliance and check that internal controls are working should听be explained in the business鈥檚 policies, controls and procedures. 听听

You should check the听business is doing what is听described in writing and that it is appropriate to the size and nature of the business. For example, the expectation for a very small business is different than a large business with multiple branches. For more guidance on what is appropriate, see the technical guidance in the link above.听

It鈥檚 important to consider whether the business meets the requirement to establish and maintain systems to respond 鈥渇ully and rapidly鈥� to enquiries from law enforcement authorities, as to听whether it has had a business relationship with any person, and the nature of that relationship, within the last 5 years.听

Businesses with agents and/or branches听

If the business has agents included within its registration, you should consider how risk and compliance are managed in respect of 鈥�fit and proper鈥� criteria, customer due diligence, transaction monitoring and reporting suspicious transactions.听

If the business has branches or agents, you should establish whether site visits are carried out to branches or agents to check compliance. If so, you should check the compliance audit indicates the branch visited, files reviewed, staff spoken to and whether the check was satisfactory or what remedial actions were taken. If not, you should consider how the business monitors agent/branch activity and consider whether any听additional premises should be visited.