Risk & Controls

What are the key fraud risk signals and how should AFS licensees use them?

AUSTRAC and ASIC expect AFS licensees to identify and assess fraud risk using multiple signals, including customer-provided data, system metadata,...

What documentation should be reviewed before an ASIC or AUSTRAC review?

ASIC and AUSTRAC expect AFS licensees to have key compliance, governance, and operational documents readily available and up to date,...

How should an AFS licensee prepare for an ASIC or AUSTRAC review?

ASIC and AUSTRAC expect AFS licensees to maintain readily accessible, accurate, and complete records that evidence compliance with obligations, and...

What are the risks of using AI tools in advice preparation?

ASIC expects AFS licensees to ensure that any use of AI in advice preparation does not compromise the accuracy, completeness,...

What are the biggest compliance risks in marketing and disclosures?

ASIC expects marketing and disclosures to be clear, balanced, and not misleading. Common risks include exaggerated claims, inadequate disclaimers, and...

What compliance infrastructure do I need for AML/CTF?

AUSTRAC requires a reporting entity providing designated services to maintain and comply with a risk-based AML/CTF program. The infrastructure must...

What risk management frameworks are required for AFSL holders?

AFSL holders must maintain adequate risk management systems appropriate to their business operations. This requirement arises from the general obligations...

What role does APRA and ASIC guidance play in risk management?

APRA and ASIC guidance shape how AFS licensees design and operate risk management systems. ASIC focuses on conduct, advice and...

How do I determine my organisation’s risk appetite?

An AFS licensee determines its risk appetite by defining the level and types of risk it is willing to accept...

How can risk transfer be used in managing risk?

Risk transfer is a risk management strategy where an AFS licensee shifts some financial or operational risk to a third...

Step 1 of 8 - Your Role

This field is for validation purposes and should be left unchanged.

Assess your ASIC exposure

Answer a few targeted questions to identify where your compliance may not stand up under ASIC review.

Takes less than 2 minutes. No preparation required.

What best describes your role?