Regulatory Regimes, Risk Assessments and Collaboration

National and sectoral risk assessments, US and EU AML and sanctions regimes, regimes in other jurisdictions, public-private partnerships and the other laws that shape AFC work.

5 minutes 5 Questions

In the Certified Anti-Money Laundering Specialist (CAMS) framework, Regulatory Regimes, Risk Assessments and Collaboration form three interlocking pillars of an effective anti-money laundering (AML) and counter-terrorist financing (CTF) program. Regulatory Regimes refer to the layered body of laws…

Concepts covered
Private-Sector Information-Sharing ConsortiaUS AML Framework: BSA, USA PATRIOT Act and AML ActUS Regulators: FinCEN, OFAC and the Banking AgenciesEU AML Authority and National Competent AuthoritiesUS and EU Sanctions ProgrammesConflicting Sanctions Regimes and Blocking StatutesPublic-Private Partnerships for Information SharingConsumer Protection, Conduct, Ethics and ESG ObligationsComparing AFC Regimes Across JurisdictionsSectoral Risk Assessments and the Risk-Based ApproachData Privacy and Protection Laws in AFC WorkExtraterritorial Reach of US and EU LawEU AML Directives and the AML RegulationFinancial Inclusion and Proportionate RegulationLimits of Sharing Data and Intelligence in PPPsNational Risk Assessments
Test mode:
Start practice test

CAMS - Regulatory Regimes, Risk Assessments and Collaboration Example Questions

Test your knowledge of Regulatory Regimes, Risk Assessments and Collaboration

Question 1

A bank belongs to a private-sector information-sharing consortium. It operates under a legal gateway that lets members exchange information to identify possible money laundering. A peer member asks about a shared customer. The bank's MLRO recently filed a suspicious activity report on this customer with the FIU. Which response by the bank is MOST appropriate?

Correct Answer: Share the relevant transaction details and red flags, keeping the report's existence confidential

A legal gateway such as a consortium safe harbor permits members to exchange the underlying facts, transactions and red flags behind suspected money laundering. The existence of a SAR stays confidential, so sharing facts without mentioning the report is the appropriate response.
Sending the peer a copy of the filed report breaches SAR confidentiality, because the gateway covers underlying information, not the report itself. Waiting for written FIU approval is unnecessary, since the gateway already authorizes sharing. Handing over the full KYC file and account history goes beyond the gateway's purpose and breaches data-minimization principles.
Key concept: information-sharing gateways allow sharing of underlying facts while SAR confidentiality is preserved.

Question 2

Which of the following BEST describes a core limitation on exchanging information within a public-private partnership between financial institutions, the FIU and law enforcement?

Correct Answer: Legal gateways and privacy rules limit what members may lawfully share

Public-private partnerships such as JMLIT or FinCEN 314 programs operate only within legal gateways, data protection laws, bank secrecy and tipping-off rules, so members can share only what the legal framework expressly permits.
The claim that only typologies may be shared because all client data needs a court order is wrong, since many partnerships lawfully exchange tactical, client-specific information through statutory gateways. Shared intelligence never replaces each member's own monitoring and SAR obligations. Intelligence is not one-way only; feedback from the FIU and law enforcement to institutions is a key benefit of these partnerships.
Key concept: legal and privacy constraints on information sharing in public-private partnerships.

Question 3

A newly published national risk assessment rates the money services business (MSB) sector as medium risk. A bank's enterprise-wide risk assessment rates its own MSB customers as high risk. That rating rests on the bank's transaction data, which shows heavy flows through high-risk remittance corridors. The MLRO must reconcile the two assessments. What is the MOST appropriate approach?

Correct Answer: Retain the higher internal rating and record why its exposure differs from the national findings

A national risk assessment is a key input, but the bank's own assessment must reflect its actual exposure, so it should keep the high rating its transaction data supports and document why its MSB customers carry more risk than the sector average.
Lowering the rating to match the national view ignores the bank's own evidence of high-risk corridor flows. Blending the two into one weighted score dilutes real risk signals and is not risk-based. Waiting for supervisor approval is wrong because banks do not need permission to rate risk higher than national findings; they need sound documented reasoning.
Key concept: national risk assessments inform, but do not override, an institution's evidence-based enterprise-wide risk assessment.

More Regulatory Regimes, Risk Assessments and Collaboration questions
299 questions (total)
Practice 100 questions
One session at a time, always new questions