A deficiency in the design of a bank’s AML/CFT compliance program could result in placing...

Regulatory frameworks and enforcement actions consistently emphasize individual accountability at the highest levels of governance when AML/CFT compliance programs are deficient in design or implementation.

The board of directors is ultimately responsible for oversight of the institution’s AML/CFT framework. This includes approving policies, setting risk appetite, and ensuring that adequate resources and governance structures are in place. Failure to fulfill these responsibilities can result in regulatory findings and personal accountability.

Senior management is responsible for implementing the board-approved AML/CFT strategy and ensuring that controls operate effectively in practice. This includes overseeing compliance functions, addressing identified weaknesses, and ensuring timely remediation. Deficiencies in program design—such as inadequate risk assessments or ineffective controls—often lead regulators to hold senior management accountable.

While the compliance department plays an important role in execution and advisory functions, accountability for program design and effectiveness rests with the board and senior management, not committees or individual departments.