The Certified Anti-Money Laundering Specialist (CAMS7 the 7th edition) (CAMS)

In anEnterprise-Wide Risk Assessment (EWRA),residual riskis the level of risk that remains after applying mitigating controls to theinherent risk(the risk present before controls are applied).

In this scenario, theinherent risk is highdue to the nature of private banking—high net worth clients,cross-border transactions,complex ownership structures, andhigh-value financial products. However, the institution has implementedrobust CDD and EDD, as well asadvanced transaction monitoring systems.

According to the CAMS Study Guide – 6th Edition, wheneffective and properly implemented controlsare in place, they cansignificantly reducethe residual risk—even in high-risk business areas like private banking. However, no control framework caneliminate all riskentirely.

Option Ais correct: Controls can significantly reduce the residual risk when strong, effective systems and procedures are in place.

Option Bis partially true but suggests inadequacy, which is not indicated here.

Option Cincorrectly assumes residual risk cannot be lowered even with controls.

Option Dis incorrect because residual riskcannot be eliminated entirely.

USA PATRIOT Act Section 314(b)allows financial institutions tovoluntarily share information with one another, after notifying the U.S. Treasury, toidentify and report possible money laundering or terrorist financing activities.

Key elements include:

Voluntary participation

Prior notice to FinCEN (part of the U.S. Treasury)

Protection from liability when acting in good faith

Enhanced collaborative detection across institutions

Section 314(a)refers toinformation sharing between law enforcement and financial institutions, not peer-to-peer sharing.

COSMICis an initiative in certain jurisdictions like Singapore, not U.S. regulation.

Regulation (EU) 2024/1624is part of the EU AML framework, not relevant to U.S. institutions.

One of the central pillars of the EU AML Package adopted in June 2024 is theEU AML Regulation. This regulation introduces directly applicable AML/CFT rules across all EU member states, replacing the previous approach where AML directives were transposed into national laws. This shift addresses regulatory fragmentation and strengthens enforcement across borders.

The complete AML Package includes the following four pillars:

EU AML Regulation (directly applicable rulebook)

6th AML Directive (not the 7th)

Establishment of a new EU Anti-Money Laundering Authority (AMLA)

Revised Transfer of Funds Regulation, especially concerning crypto-asset service providers

The EU AML Regulation aims to unify and streamline the application of AML/CFT measures across the EU, ensuring a consistent and effective framework.

The first step in designing an effective controls framework using a risk-based approach is conducting a risk assessment. This identifies and evaluates inherent risks, providing the basis for determining which controls are necessary and how they should be prioritized.

Cryptocurrency and convertible virtual currencies present common financial crime risks such as obscuring the origin of illicit funds, being used to layer transactions for money laundering, and facilitating payments for illegal goods and services due to their pseudo-anonymous and borderless nature.

Case notes should document who made the decision and the rationale for not filing the SAR to ensure transparency, support auditability, and demonstrate compliance with regulatory expectations.

The United Nations Security Council (UNSC) has evolved its sanctions framework to minimize unintended humanitarian consequences. In line with international best practice, the UNSC increasingly relies on targeted sanctions , also known as “smart sanctions,” rather than broad-based measures.

Targeted sanctions are designed to focus specifically on individuals, entities, or activities responsible for threats to international peace and security. These measures may include asset freezes, travel bans, and arms embargoes directed at specific actors. By narrowing the scope, targeted sanctions aim to reduce the negative impact on innocent civilian populations and legitimate economic activity.

In contrast, comprehensive sanctions apply to entire countries or sectors and often result in significant humanitarian and economic harm. The term “comprehensive targeted sanctions” is not a recognized sanctions category.

Therefore, targeted sanctions are the preferred UNSC tool when the objective is to minimize adverse effects on civilians while maintaining pressure on responsible parties.

The FATF’s core role is to enhance international cooperation against money laundering and terrorist financing through setting global standards (“Recommendations”) and issuing guidance.

“The FATF is an intergovernmental body whose purpose is the development and promotion of national and international policies to combat money laundering and terrorist financing.”

The FATF does not have authority to oversee FIUs, nor does it regulate financial markets directly.

Terms of Reference (ToR) are a fundamental governance document that define how a committee operates, makes decisions, and fulfills its responsibilities. Regulatory guidance and corporate governance best practices emphasize clarity and accountability in committee mandates.

The extent of power and decision-making authority must be clearly defined to ensure members understand what decisions they are authorized to make and where escalation is required. This prevents overlaps or governance gaps.

The composition and structure of the committee, including membership criteria and roles, ensures appropriate expertise and representation. This is essential for effective oversight, particularly in AML/CFT and risk committees.

Delegation of authority outlines how responsibilities may be assigned or escalated, supporting efficient decision-making while maintaining accountability.

Organization charts and company culture statements are not typically core components of a ToR, as they do not define operational authority or governance mechanics.