Nordic AML/CFT — Enterprise-Wide Risk Assessment

Overview

Draft and validate the enterprise-wide AML/CFT risk assessment for Nordic supervisors. Covers inherent risk, control effectiveness, residual risk, and risk appetite per Joint ESA Guidelines and AMLD6.

Example Conversation

You: We need a Nordic AML risk assessment with all four risk dimensions, control effectiveness, residual risk, risk appetite, and reference to Joint ESA Guidelines. Include PEP and sanctions screening.

Agent: I’ll draft the assessment using the template and Nordic AML checklist, then run nordic_aml_risk_checker to verify coverage.

Agent: Created aml-risk-assessment.md. Running nordic_aml_risk_checker…

Agent: FAIL — risk_appetite and ESA_Guidelines_reference missing. I’ve added a risk appetite statement and a reference to the Joint ESA Guidelines on ML/TF risk factors. Re-running…

Agent: PASS — all required Nordic AML risk assessment elements are present. Ready for MLRO or supervisory review.

What the Tools Validate

nordic_aml_risk_checker scans the AML/CFT risk assessment:

• Four dimensions: Customer risk, geographic risk, product risk, delivery channel risk (per Joint ESA Guidelines). Control effectiveness and residual risk must be addressed; risk appetite defined; PEP and sanctions screening addressed; Joint ESA Guidelines referenced.
• Rule: All four dimensions, control effectiveness, residual risk, risk appetite, PEP/sanctions, and ESA reference must be present.
• Output: PASS if all elements are present; FAIL with a list of missing areas. Add content and re-run until PASS.

Output Excerpt

AML risk assessment (excerpt):

| Dimension  | Inherent risk | Control effectiveness | Residual risk |
|------------|---------------|------------------------|---------------|
| Customer   | High          | Strong CDD/EDD        | Medium        |
| Geography  | Medium        | Screening in place    | Low           |

Risk appetite: Residual risk in any dimension shall not exceed Medium without board approval.
PEP and sanctions screening: Automated screening at onboarding and ongoing; manual review for matches.
Reference: Joint ESA Guidelines on ML/TF risk factors (EBA/ESMA/EIOPA).

nordic_aml_risk_checker report (excerpt):

=== NORDIC AML RISK CHECKER ===
Result: PASS

Document: aml-risk-assessment.md
All required Nordic AML risk assessment elements present.
Assessment meets Nordic AML/CFT expectations.

Getting Started

Add your source materials to the project workspace, then activate the Nordic AML/CFT — Enterprise-Wide Risk Assessment skill. The agent will guide you through the process step by step.