7.riskassessment consolidated v2 - sanctionsalert · •incorrect risk rating methodology...

23
Sanctions Risk Management Symposium September 18-19, 2017 | The Princeton Club | New York, NY in cooperation with September 18, 4:45 – 5:30 PM Designing a Sanctions/Export Controls Risk Assessment That Government Agencies (in Any Country) Will Applaud 1

Upload: others

Post on 02-Jun-2020

6 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Sanctions Risk ManagementSymposium

September 18-19, 2017 | The Princeton Club | New York, NY

incooperation with

September18,4:45– 5:30PM

DesigningaSanctions/ExportControlsRiskAssessmentThatGovernmentAgencies(inAnyCountry)WillApplaud

1

Page 2: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Moderator

Panelists

2

Page 3: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

3

Page 4: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

4

Page 5: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

• IncorrectRiskRatingMethodology• AssessingRelevantRiskAreas• FailingtoAssessTopicsofInteresttoRegulators• OFAC• AML,Export,Anticorruption•MisrepresentingDataorResults• DataQuality• ExpertJudgment• LackofSenior-LevelOwnership•MustShowInvolvement• FailingtoActontheResults• ImplementationofActionPlans

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

MostCommonRiskAssessmentMisstepswithRegulators

5

Page 6: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Sanctions Risk ManagementSymposium

September 18-19, 2017 | The Princeton Club | New York, NY

incooperation with

Questions?

6

Page 7: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

BasePenaltyMatrixfromOFAC

EnforcementGuidelines

7

Page 8: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

FinancialCrimesEnforcementNetwork(FinCEN)

§ PartofU.S.Treasury§ Establishedin1990§ Safeguardsthefinancialsystemfromillicituseandcombats

moneylaunderingandpromotesnationalsecuritythroughthecollection,analysis,anddisseminationoffinancialintelligenceandstrategicuseoffinancialauthorities.

www.fincen.gov

8

Page 9: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

BISEnforcementGuidelines

9

§ GuidanceonChargingandPenaltyDeterminationsinSettlementofAdministrativeEnforcementCases

§ RevisedJune22,2016§ Promotesgreatertransparencyandpredictabilitytotheadministrative

enforcementprocess.§ AlignsproceduresofDOC’OfficeofExportEnforcementwiththoseofOFAC,

bothofwhichadministerbulkofprogramsunderInternationalEmergencyEconomicPowersAct.

§ https://www.bis.doc.gov/index.php/documents/pdfs/1567-administrative-enforcement-guidelines/file

Page 10: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

OFACEnforcementActions2003– Sept.2017

10

413

238

129

106

64

24 19 18 16

10

0

50

100

150

200

250

300

350

400

450

Cuba Iran Sudan Yugoslavia Libya Kingpin/SDNT Iraq Burma WMD Terrorism

WhatSanctionsProgramWasViolated

CUBA IRAN SUDAN YUGOSL

413

238

129106

64

LIBYA KINGPIN

24 19

IRAQ BURMA

18

WMD

16 10

TERRORISM

WhatSanctionsProgramWasViolated?

Sourcedata:OFAC

AnalysisandCompilationbySanctionsAlert.com

Page 11: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

InherentRisk

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

Representstheexposuretomoneylaundering,sanctions orbriberyandcorruptionriskintheabsenceofanycontrolenvironmentbeingapplied.

11

Page 12: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

ResidualRisk

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

Theriskthatremainsaftercontrolsareappliedtotheinherentrisk.Itisdeterminedby

balancingthelevelofinherentriskwiththeoverallstrengthoftheriskmanagement

activities/controls.TheresidualriskratingisusedtoassesswhethertheMLriskswithinthe

FIarebeingadequatelymanaged.12

Page 13: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

RiskAssessment

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

Anexerciseusedtoidentifykeyrisksfacedbythefirmandtotestthecontrolsthatafirmhasinplacetomitigatetheserisks.Riskscanbebothexternalandinternaltothefirm.Theriskassessmentaimstomeasurethetotal

exposureafirmhastotherisksitfacesandtoplanactionstoreducetheserisks.

13

Page 14: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Wolfsberg:ConventionalML/TF/Sanctions/ABCRiskAssessmentMethodology

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

14

Page 15: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:WolfsbergFAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

15

Page 16: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:FFIECBSA/AMLExaminationManual

APPENDIX M: QUANTITY OF RISK MATRIX—OFAC PROCEDURES

16

Page 17: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

ExportCompliance

Source:DepartmentofCommerce,BIS:2017ExportComplianceGuidelines:TheElementsofanEffectiveComplianceProgramhttps://www.bis.doc.gov/index.php/forms-documents/pdfs/1641-ecp/file

17

Page 18: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

ExportComplianceRisksand

WaystoMitigate

Source:DepartmentofCommerce,BIS:2017ExportComplianceGuidelines:TheElementsofanEffectiveComplianceProgramhttps://www.bis.doc.gov/index.php/forms-documents/pdfs/1641-ecp/file

18

Page 19: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

19

§Notproperlydocumented§Didnotincorporatealllinesofbusinessorentities§Didnotconsiderallmajorriskcategories§Policiesdidnotspecifyfrequencyofriskassessmentupdates§Nodocumentedmethodologyforassigningriskrankings§Policies,proceduresnotcommensuratewithbank/company’sriskprofile§Notalignedtopoliciesandprocedures

SampleDeficienciesinSanctionsRiskAssessment

Page 20: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

20

§ Scanningagainstinapplicablewatchlistsofferedbyvendor§ Scanningagainstmoreliststhannecessary§Notscanningagainstrelevantlists§ Inadequatemappingofdatafieldstowatchlists§Dataintegrityissues§ Inadequatealgorithms/fuzzylogic

SampleDeficienciesinConfigurationSanctionsListScreening

Page 21: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

21

NewYorkDepartmentofFinancialServices(DFS)Part504Rule§ RuleeffectiveJanuary1,2017§ FirstcertificationdueonApril18,2018§Whoissubject?

§ Banksandnon-bankinstitutionslicensedorcharteredunderNYlaw

§ Banks§ Branchesandagenciesofforeignbanks§ Trustcompanies§ Privatebankers§ Savingsbanks§ Savingsandloanassociations

RequirementsofFilteringProgramReasonablydesigned forpurposeofinterdicting

transactionsthatareprohibitedbyOFAC.Basedonon-going,enterprisewideRiskAssessmentBasedontechnology,processesortoolsreasonablydesigned toidentifyprohibitedtransactions through

nameandaccountmatchingorotherwiseEnd-to-endpre- andpost-implementationtestingof

variousfactorsincludingmappingriskstoOFACsanctionslists,matchinglogicdetectionscenariosand

otherfactors,asrelevantDocumentation oftheprogramanditstoolsand

processes

Page 22: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

22

Source:AudiencePollfromSanctionsAlert.comAugust2017WebinaronNYDFSPart504

Rule(238attendees)

Page 23: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

23

Source:AudiencePollfromSanctionsAlert.comAugust2017WebinaronNYDFSPart504

Rule(238attendees)