Findings from a financial institution's (Fl's) regulatory examination suggest that several unidentified risks pose a serious threat. The Fl identifies the risks and implements a set of controls to mitigate those risks. Which type of risk considers the controls' effectiveness?
Which best explains why the auditor rates the audit finding on sanction screening severity high?
Which should be evaluated when analyzing components of risk mitigation in an AML risk assessment? (Select Two.)
What should the auditor look for to assess the adequacy of controls for non-profit organizations that are vulnerable to terrorist financing (TF) abuse? (Select Two.)
Which task should an auditor complete first when preparing to audit the client risk scoring methodology?
A recent regulatory examination identified serious deficiencies in the AML program. Which action should the organization take first?
When sample testing client transaction records, the auditor finds that a client offered to sell a piece of art on a commission basis. A sale was completed and the purchase price was remitted to the client with less commission. What further investigation should the auditor undertake?
Which should the external auditor recommend to ensure that the institution did not facilitate transactions involving a sanctioned person?
An audit determines that an important control is not being performed. The operational manager responds to the audit comment stating that they do not have adequate resources in the department to accomplish this task. The audit item discussion between the auditor and the operational manager is a(n):
As an auditor reviewing this investigation report, which indicates an effective process?
Which products/services increase the risk level for money laundering for XYZ Bank?
The standard audit report format requires that an executive summary of the findings is included. Which statement is most appropriate for summarizing detailed findings'?
What factors are considered tor conducting an external audit and assurance review? (Select Three.)
A financial institution utilizes an automated daily validation report to validate the accuracy of the data flowing into its monitoring software. An auditor is responsible for testing the data used to create the report. This is an example of testing which type of effectiveness?
What type of audit approach should the auditor use when testing KYC files as part of an AML examination?
in addition to this investigation report, what Information should the auditor expect to find in the investigative file? (Select Two.)
When testing the operational effectiveness of an institution's customer risk rating model an auditor finds that the risk rating is not in accordance with the model specification in some cases.After interviewing developers andofficers,the auditor learns the specification document is inaccurate and has not been updated in a timely manner.Which are appropriate corrective action plans'? (Select Two.)
Why is it crucial for the audit plan to consider the effectiveness of the AML risk assessment controls and risk mitigants?
During a sample review, the auditor notices that an alert was generated for a large deposit that was inconsistent with the customer profile. The customer has had no other incidents in the past 10 years and has provided documents to confirm the deposit as a property sale. What should the auditor do?
During the ongoing due diligence process the company becomes aware that the customer is holding personal assets for a politically exposed person (PEP). What should the auditor recommend to enhance the control environment for this customer relationship? (Select Three.)
Which requirement of a financial institution's compliance program should an auditor review first to understand key roles and responsibilities?
Review of client files reveals that staff members have been performing negative media searches for clients only when they recognize the client name. When an interesting story is identified a print of the results is inserted in the client file. There are no clear procedures on adverse media screening. Which should the auditor recommend? {Select Two.)
An auditor is writing the scope for an AML review of a financial institution. The objective is to evaluate how effectively existing controls are designed and operating. Which areas should be assessed? (Select Two.)