Assessments
Measure where the business actually stands.
Five instruments on one engine, applied at three altitudes: a product, the enterprise, or the entity.
A spreadsheet rebuilt each year with no history cannot show what changed, and an examiner asking about a rating from two years ago is asking exactly that.
Product level
CPRA
Score the compliance risk of a single product, or a change to one, covering probability, impact, controls and routing to the right reviewer.
Enterprise level
BWRA
Assess enterprise risk across governance, fraud, security and financial crime, with the whole business in one register.
Entity level
AML/ATF, Sanctions and Fraud
Three frameworks on the same engine, producing a composite headline rating for the business.
| Framework | What it rates |
|---|---|
| AML / ATF | The business against money laundering and terrorist financing risk across clients, products, delivery channels and geography, with the controls you have against each. |
| Sanctions | Sanctions exposure: screening, ownership, payment routes, and the failures that put firms in front of a regulator. |
| Fraud | Fraud of every kind, external and first-party, internal and vendor, producing a documented risk profile rather than a list of incidents. |
Try the sanctions one, free
A live slice of the Sanctions Risk Assessment: a real OFAC risk rating, scored against our own risk library, delivered by email. One per organisation.
Run the free OFAC assessmentRun it yourself, or have us run it.
Every assessment can be delivered as an engagement or licensed to your own team.