Business model mapping
Products, services, delivery channels, jurisdictions and customer segments.
Back to Advisory
EWRA advisory
A defensible AML and Sanctions Firm-Wide Risk Assessment — built or reviewed by senior practitioners.
We help licensed institutions design or refresh their Enterprise-Wide Risk Assessment (EWRA) — covering both AML-FWRA and Sanctions FWRA — so the methodology, evidence and conclusions stand up to regulator scrutiny.
Outcomes
What you get out of this engagement.
- Board-approved EWRA methodology aligned to FATF and your national regulator
- Inherent-risk scoring across products, delivery channels, geographies and customer segments
- Control effectiveness scoring and residual-risk heatmaps
- Clear linkage from EWRA outputs to CDD/EDD, monitoring and training programmes
Deliverables
- EWRA methodology document
- AML-FWRA and Sanctions FWRA scoring workbooks
- Residual-risk heatmaps and narrative report
- Remediation and action plan with owners and deadlines
Scope
What's included.
Inherent-risk model
Weighted factors and scoring rationale documented for each risk driver.
Control library
Preventive and detective controls mapped to each inherent-risk factor.
Sanctions FWRA overlay
Sanctions-specific typologies, list coverage and screening controls.
Residual-risk output
Heatmaps, narratives and board-ready executive summary.
Process
How the engagement runs.
- 1
Discovery
Workshops with 1st and 2nd line to capture the business model and current controls.
- 2
Methodology
Draft or refresh the EWRA methodology, scoring model and evidence requirements.
- 3
Scoring
Run inherent, control-effectiveness and residual-risk scoring with your team.
- 4
Board pack
Deliver written report, heatmaps, action plan and board presentation.
Frequently asked questions.
Do you cover both AML and Sanctions FWRA?
Yes. Every EWRA engagement covers AML-FWRA and Sanctions FWRA as either an integrated model or two aligned models, depending on your regulator's expectations.
How long does an EWRA engagement take?
Typical timeframes range from 4 to 10 weeks depending on the size of the institution, number of business lines and whether we are refreshing an existing methodology or building from scratch.
Can you review an EWRA we have already drafted?
Yes. We offer independent second-line reviews of an existing EWRA, including methodology critique, scoring validation and a written report suitable for board and regulator.
Ready to scope this engagement?
Share your licence, jurisdiction and current pain points. We'll come back with a fixed-scope proposal, timeline and price within two working days.