Risk assessment processes and controls in firms: our findings
We share findings and highlight good and poor practice to help firms reflect on how they are meeting the existing risk assessment requirements. In 2025, we carried out a multi-firm review focusing on business-wide risk assessment (BWRA) and customer risk assessment (CRA) processes. Our key findings centre around how firms: Identify, understand and assess risk.Appropriately mitigate risk.Effectively manage risk.This review is part of our wider financial crime supervisory work in support of our 2025–30 strategy. Who this applies toFirms.Money Laundering Reporting Officers (MLROs).Senior Managers with oversight.Industry practitioners working in financial crime prevention roles and responsible for assessing risk and setting…
