Risk & Controls

In the context of AML/CTF, what are “suspicious matters” or “unusual activity”?

Under the AML/CTF regime, AUSTRAC expects reporting entities to identify and assess unusual activity that may indicate money laundering, terrorism...

Does transacting on an MDA using discretion expose me to increased AML/CTF obligations?

Yes. AUSTRAC generally treats discretionary transacting on an MDA as potentially outside Item 54-only relief and within Item 3, where...

What are the risks of relying on AI outputs?

AFS licensees and advisers should not rely on AI outputs without verification. ASIC expects firms using AI to identify, manage...

What is ISO/IEC 42001?

ISO/IEC 42001 is an international standard for Artificial Intelligence Management Systems (AIMS). It applies to organisations that develop, deploy or...

How should advisers manage cybersecurity incidents and when must they notify regulators or clients?

ASIC expects AFS licensees and advisers to manage cybersecurity incidents through documented processes for detection, escalation, investigation, containment, remediation, and...

What are the compliance requirements when using AI tools such as ChatGPT in financial advice practices?

ASIC expects AFS licensees and financial advisers who use AI tools such as ChatGPT to maintain full responsibility for the...

When does a compliance breach become a reportable situation under ASIC’s regime?

SIC’s reportable situations regime applies when an AFS licensee identifies a breach, or likely breach, that is significant, deemed significant...

When is advising a foreign client a low risk from a regulatory perspective?

ASIC expects AFS licensees to treat advising foreign clients as lower risk where services are incidental, client-initiated, and not ongoing...

When does advising a foreign client become high risk from a regulatory perspective?

ASIC expects AFS licensees to treat advising foreign clients as high risk where services are targeted, ongoing, or involve cross-border...

How should AFS licensees and Credit licensees use link analysis to detect fraud and network risk?

AUSTRAC expects AFS licensees to identify complex or coordinated suspicious activity by analysing relationships between customers, accounts, and devices. Effective...

Step 1 of 8 - Your Role

This field is for validation purposes and should be left unchanged.

Assess your ASIC exposure

Answer a few targeted questions to identify where your compliance may not stand up under ASIC review.

Takes less than 2 minutes. No preparation required.

What best describes your role?