Top Banner
Sanctions Risk Management Symposium September 18-19, 2017 | The Princeton Club | New York, NY in cooperation with September 18, 4:45 – 5:30 PM Designing a Sanctions/Export Controls Risk Assessment That Government Agencies (in Any Country) Will Applaud 1
23

7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Jun 02, 2020

Download

Documents

dariahiddleston
Welcome message from author
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Page 1: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Sanctions Risk ManagementSymposium

September 18-19, 2017 | The Princeton Club | New York, NY

incooperation with

September18,4:45– 5:30PM

DesigningaSanctions/ExportControlsRiskAssessmentThatGovernmentAgencies(inAnyCountry)WillApplaud

1

Page 2: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Moderator

Panelists

2

Page 3: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

3

Page 4: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

4

Page 5: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

• IncorrectRiskRatingMethodology• AssessingRelevantRiskAreas• FailingtoAssessTopicsofInteresttoRegulators• OFAC• AML,Export,Anticorruption•MisrepresentingDataorResults• DataQuality• ExpertJudgment• LackofSenior-LevelOwnership•MustShowInvolvement• FailingtoActontheResults• ImplementationofActionPlans

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

MostCommonRiskAssessmentMisstepswithRegulators

5

Page 6: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Sanctions Risk ManagementSymposium

September 18-19, 2017 | The Princeton Club | New York, NY

incooperation with

Questions?

6

Page 7: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

BasePenaltyMatrixfromOFAC

EnforcementGuidelines

7

Page 8: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

FinancialCrimesEnforcementNetwork(FinCEN)

§ PartofU.S.Treasury§ Establishedin1990§ Safeguardsthefinancialsystemfromillicituseandcombats

moneylaunderingandpromotesnationalsecuritythroughthecollection,analysis,anddisseminationoffinancialintelligenceandstrategicuseoffinancialauthorities.

www.fincen.gov

8

Page 9: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

BISEnforcementGuidelines

9

§ GuidanceonChargingandPenaltyDeterminationsinSettlementofAdministrativeEnforcementCases

§ RevisedJune22,2016§ Promotesgreatertransparencyandpredictabilitytotheadministrative

enforcementprocess.§ AlignsproceduresofDOC’OfficeofExportEnforcementwiththoseofOFAC,

bothofwhichadministerbulkofprogramsunderInternationalEmergencyEconomicPowersAct.

§ https://www.bis.doc.gov/index.php/documents/pdfs/1567-administrative-enforcement-guidelines/file

Page 10: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

OFACEnforcementActions2003– Sept.2017

10

413

238

129

106

64

24 19 18 16

10

0

50

100

150

200

250

300

350

400

450

Cuba Iran Sudan Yugoslavia Libya Kingpin/SDNT Iraq Burma WMD Terrorism

WhatSanctionsProgramWasViolated

CUBA IRAN SUDAN YUGOSL

413

238

129106

64

LIBYA KINGPIN

24 19

IRAQ BURMA

18

WMD

16 10

TERRORISM

WhatSanctionsProgramWasViolated?

Sourcedata:OFAC

AnalysisandCompilationbySanctionsAlert.com

Page 11: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

InherentRisk

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

Representstheexposuretomoneylaundering,sanctions orbriberyandcorruptionriskintheabsenceofanycontrolenvironmentbeingapplied.

11

Page 12: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

ResidualRisk

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

Theriskthatremainsaftercontrolsareappliedtotheinherentrisk.Itisdeterminedby

balancingthelevelofinherentriskwiththeoverallstrengthoftheriskmanagement

activities/controls.TheresidualriskratingisusedtoassesswhethertheMLriskswithinthe

FIarebeingadequatelymanaged.12

Page 13: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

RiskAssessment

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

Anexerciseusedtoidentifykeyrisksfacedbythefirmandtotestthecontrolsthatafirmhasinplacetomitigatetheserisks.Riskscanbebothexternalandinternaltothefirm.Theriskassessmentaimstomeasurethetotal

exposureafirmhastotherisksitfacesandtoplanactionstoreducetheserisks.

13

Page 14: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Wolfsberg:ConventionalML/TF/Sanctions/ABCRiskAssessmentMethodology

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:Wolfsberg FAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

14

Page 15: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:WolfsbergFAQsonRiskAssessmentsforML,SanctionsandBribery&Corruption

15

Page 16: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

Source:FFIECBSA/AMLExaminationManual

APPENDIX M: QUANTITY OF RISK MATRIX—OFAC PROCEDURES

16

Page 17: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

ExportCompliance

Source:DepartmentofCommerce,BIS:2017ExportComplianceGuidelines:TheElementsofanEffectiveComplianceProgramhttps://www.bis.doc.gov/index.php/forms-documents/pdfs/1641-ecp/file

17

Page 18: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

ExportComplianceRisksand

WaystoMitigate

Source:DepartmentofCommerce,BIS:2017ExportComplianceGuidelines:TheElementsofanEffectiveComplianceProgramhttps://www.bis.doc.gov/index.php/forms-documents/pdfs/1641-ecp/file

18

Page 19: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

19

§Notproperlydocumented§Didnotincorporatealllinesofbusinessorentities§Didnotconsiderallmajorriskcategories§Policiesdidnotspecifyfrequencyofriskassessmentupdates§Nodocumentedmethodologyforassigningriskrankings§Policies,proceduresnotcommensuratewithbank/company’sriskprofile§Notalignedtopoliciesandprocedures

SampleDeficienciesinSanctionsRiskAssessment

Page 20: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

20

§ Scanningagainstinapplicablewatchlistsofferedbyvendor§ Scanningagainstmoreliststhannecessary§Notscanningagainstrelevantlists§ Inadequatemappingofdatafieldstowatchlists§Dataintegrityissues§ Inadequatealgorithms/fuzzylogic

SampleDeficienciesinConfigurationSanctionsListScreening

Page 21: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

21

NewYorkDepartmentofFinancialServices(DFS)Part504Rule§ RuleeffectiveJanuary1,2017§ FirstcertificationdueonApril18,2018§Whoissubject?

§ Banksandnon-bankinstitutionslicensedorcharteredunderNYlaw

§ Banks§ Branchesandagenciesofforeignbanks§ Trustcompanies§ Privatebankers§ Savingsbanks§ Savingsandloanassociations

RequirementsofFilteringProgramReasonablydesigned forpurposeofinterdicting

transactionsthatareprohibitedbyOFAC.Basedonon-going,enterprisewideRiskAssessmentBasedontechnology,processesortoolsreasonablydesigned toidentifyprohibitedtransactions through

nameandaccountmatchingorotherwiseEnd-to-endpre- andpost-implementationtestingof

variousfactorsincludingmappingriskstoOFACsanctionslists,matchinglogicdetectionscenariosand

otherfactors,asrelevantDocumentation oftheprogramanditstoolsand

processes

Page 22: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

22

Source:AudiencePollfromSanctionsAlert.comAugust2017WebinaronNYDFSPart504

Rule(238attendees)

Page 23: 7.RiskAssessment Consolidated V2 - sanctionsalert · •Incorrect Risk Rating Methodology •Assessing Relevant Risk Areas •Failing to Assess Topics of Interest to Regulators •OFAC

Navigating the Turbulent Currents of International Sanctions and Export Controls | September 18-19, 2017 | The Princeton Club | New York, NY

Sanctions Risk Management Symposiumincooperation with

23

Source:AudiencePollfromSanctionsAlert.comAugust2017WebinaronNYDFSPart504

Rule(238attendees)