Assessing AML/CFT is an ongoing and evolving component of maintaining a compliant AML/CFT program.
Evaluating the risk-scoring model and conducting the risk assessment itself may need to be performed annually, every 18 to 24 months, before the launch of a new product or when an acquisition of another financial institution occurs.

The USA PATRIOT Act stipulates that US banks that maintain correspondent accounts for foreign banks must keep identification records of foreign bank owners with 50% or more ownership in the bank. This ensures that the US government can track the flow of funds through the correspondent accounts and prevent money laundering and terrorist financing. Additionally, the US federal banking agency can require foreign banks to produce records or information related to any account opened in the US or other countries. This allows the agency to monitor the activities of foreign banks and ensure compliance with US regulations.

A TCSP providing services should have policies and procedures in place to identify critical information of the signatory, as this is one of the key elements of the customer due diligence (CDD) process. The signatory is the person who has the authority to sign documents or contracts on behalf of the customer, such as a company, a trust, or a partnership. The signatory may also be the beneficial owner, the controller, or a nominee of the customer. The TCSP should verify the identity and the capacity of the signatory, as well as the source and origin of the funds or assets involved in the transaction or business relationship. The TCSP should also monitor the activities of the signatory and report any suspicious or unusual transactions or changes in the signatory's behaviour or profile.
ACAMS Study Guide for the CAMS Certification Examination - 6th Edition, Chapter 2: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), Section 2.2:
Customer Due Diligence (CDD), Subsection 2.2.1: CDD Process, pp. 51-52
RISK-BASED APPROACH GUIDANCE FOR TRUST AND COMPANY SERVICE PROVIDERS
(TCSPs), Section III - Guidance for TCSPs, Subsection III.1: Risk Assessment, pp. 23-24 SRA | Trust and Company Service Provider guidance | Solicitors Regulation Authority, Section: Definition, Paragraph 2 A Trust and Company Service Provider (TCSP) providing services should have policies and procedures in place to identify critical information of the:, Answer B

A financial institution should examine the country or location where the customer is from or does business, the type and size of the business the customer runs, and the legal structure of the customer's business, because these factors can indicate the level ofmoney laundering risk associated with the customer. For example, some countries or locations may have weak anti-money laundering laws or high levels of corruption, some types or sizes of businesses may be more prone to generating or concealing illicit funds, and some legal structures may be more complex or opaque than others, making it harder to identify the beneficial owners or controllers of the customer.
ACAMS CAMS Certification Video Training Course1, Module 2: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), Lesson 2: Know Your Customer (KYC) and Customer Due Diligence (CDD) ACAMS CAMS Certification Study Guide2, Chapter 2: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), Section 2.2: Know Your Customer (KYC) and Customer Due Diligence (CDD), Pages 42-44

In anEnterprise-Wide Risk Assessment (EWRA),residual riskis the level of risk that remains after applying mitigating controls to theinherent risk(the risk present before controls are applied).
In this scenario, theinherent risk is highdue to the nature of private banking-high net worth clients,cross- border transactions,complex ownership structures, andhigh-value financial products. However, the institution has implementedrobust CDD and EDD, as well asadvanced transaction monitoring systems.
According to the CAMS Study Guide - 6th Edition, wheneffective and properly implemented controlsare in place, they cansignificantly reducethe residual risk-even in high-risk business areas like private banking.
However, no control framework caneliminate all riskentirely.
Option Ais correct: Controls can significantly reduce the residual risk when strong, effective systems and procedures are in place.
Option Bis partially true but suggests inadequacy, which is not indicated here.
Option Cincorrectly assumes residual risk cannot be lowered even with controls.
Option Dis incorrect because residual riskcannot be eliminated entirely.
Reference: ACAMS CAMS Study Guide - 6th Edition, Chapter:Enterprise-Wide Risk Assessment (EWRA)- Section:Inherent Risk vs. Residual Risk and the Role of Controls