What is the purpose of a Risk Appetite Statement (RAS) and its linkages while implementing organizational controls? (Select Two.)
Correct Answer: C,D
A Risk Appetite Statement (RAS) defines an institution's acceptable level of risk-taking and aligns AML and financial crime controls with organizational strategy.
Option C (Correct): An RAS sets clear limits for acceptable risk-taking, balancing risk and business opportunities.
Option D (Correct): The RAS is a management-approved document that integrates risk tolerance, compliance strategy, and business goals.
Why Other Options Are Incorrect:
Option A (Incorrect): An RAS is not just a reporting document; it actively shapes risk management decisions.
Option B (Incorrect): An RAS includes both qualitative and quantitative factors, but not just qualitative elements.
Option E (Incorrect): An RAS does not only define residual risk-it guides overall risk limits and policies.
How an RAS Strengthens AML Compliance:
Defines acceptable AML risk levels across business units.
Guides compliance teams on risk tolerance for high-risk customers.
Ensures alignment with FATF, regulatory expectations, and internal controls.
Reference:
Basel Committee's Principles for Risk Management
FATF Recommendation 1 (Risk-Based Approach to AML)
Wolfsberg Group Guidance on Risk Appetite and Compliance Frameworks