In order to prevent financial crime risk, the implemented policies, controls, and procedures must:

include sophisticated and automated controls that use the newest types of technology available (for example, artificial intelligence (Al) and machine learning).

be proportionate with regard to the size and nature of the firm, approved by senior management, and regularly reviewed

be completed by the business and validated by an external firm (for example, an auditing or consulting firm)

be created approved, and owned only by the First Line of Defense business team, and reviewed annually