Hong Leong Bank - Compliance

Is the AML compliance program approved by the FI’s board or a senior committee?

Does the FI have a legal and regulatory compliance program that includes a designated officer that is responsible for coordinating and overseeing the AML framework?

Has the FI developed written policies documenting the processes that they have in place to prevent, detect and report suspicious transactions?

In addition to inspections by the government supervisors/regulators, does the FI client have an internal audit function or other independent third party that assesses AML policies and practices on a regular basis?

Does the FI have a policy prohibiting accounts/relationships with shell banks? (A shell bank is defined as a bank incorporated in a jurisdiction in which it has no physical presence and which is unaffiliated with a regulated financial group.)

Does the FI have policies to reasonably ensure that they will not conduct transactions with or on behalf of shell banks through any of its accounts or products?

Does the FI have policies covering relationships with Politically Exposed Persons (PEP’s), their family and close associates?

Does the FI have record retention procedures that comply with applicable law?

Are the FI’s AML policies and practices being applied to all branches and subsidiaries of the FI both in the home country and in locations outside of that jurisdiction?

Does the FI have a risk-based assessment of its customer base and their transactions?

Does the FI determine the appropriate level of enhanced due diligence necessary for those categories of customers and transactions that the FI has reason to believe pose a heightened risk of illicit activities at or through the FI?

Has the FI implemented processes for the identification of those customers on whose behalf it maintains or operates accounts or conducts transactions?

Does the FI have a requirement to collect information regarding its customers’ business activities?

Does the FI assess its FI customers’ AML policies or practices?

Does the FI have a process to review and, where appropriate, update customer information relating to high risk client information?

Does the FI have procedures to establish a record for each new customer noting their respective identification documents and ‘Know Your Customer’ information?

Does the FI complete a risk-based assessment to understand the normal and expected transactions of its customers?

Does the FI have policies or practices for the identification and reporting of transactions that are required to be reported to the authorities?

Where cash transaction reporting is mandatory, does the FI have procedures to identify transactions structured to avoid such obligations?

Does the FI screen customers and transactions against lists of persons, entities or countries issued by government/competent authorities?

Does the FI have policies to reasonably ensure that it only operates with correspondent banks that possess licenses to operate in their countries of origin?

Does the FI adhere to the Wolfsberg Transparency Principles and the appropriate usage of the SWIFT MT 202/202COV and MT 205/205COV message formats?1

Does the FI have a monitoring program for unusual and potentially suspicious activity that covers funds transfers and monetary instruments such as travelers checks, money orders, etc?

Does the FI provide AML training to relevant employees that includes: - Identification and reporting of transactions that must be reported to government authorities. - Examples of different forms of money laundering involving the FI’s products and services. - Internal policies to prevent money laundering.

Does the FI retain records of its training sessions including attendance records and relevant training materials used?

Does the FI communicate new AML related laws or changes to existing AML related policies or practices to relevant employees?

Does the FI employ third parties to carry out AML functions?

If the answer to question 27 is yes, does the FI provide AML training to relevant third parties that includes: - Identification and reporting of transactions that must be reported to government authorities. - Examples of different forms of money laundering involving the FI’s products and services. - Internal policies to prevent money laundering.