Assess the AML risks across products, services, customers and geographic locations.
Review internal controls and the bank's compliance programme.
Review and evaluate the onboarding, transaction monitoring and sanctions systems.
Review current and historical transactions.
Review observations from previous third-party reviews, audits and model validations.