A regulatory-compliant risk assessment requires more than just applying a standardized template. It demands that the company precisely understands its own risk exposure, assesses it using sound methodology, and translates the findings into concrete actions. In practice, companies often lack two key elements to achieve this: specialized resources and an external perspective.

As an external partner, we provide both. We are familiar with typical audit findings from supervisory practice and know exactly where risk assessments regularly fall short of expectations. At the same time, we continuously monitor regulatory developments at the European level, including the AMLR and the AMLA specifications, which will be phased in from 2027 onwards and will further define the methodological requirements for risk assessments.

Our services:

• Methodological design or review of your risk assessment based on current regulatory requirements (BaFin Guidance, EBA Guidelines on ML/TF risk factors, FATF standards) and with a view to upcoming AMLA specifications

• Risk assessment across all relevant dimensions — customer structure, products and services, transactions, distribution channels, and geographical risk factors

• Gap analysis of existing safeguarding measures with concrete, prioritized recommendations for action

• Audit-proof documentation that meets regulatory expectations regarding traceability and currency

• Ongoing updates in the event of regulatory changes or significant adjustments to your business model