CSS Risk Analysis & Due Diligence 2 — Questions and Answers
Question 1: A compliance officer discovers that a new corporate client's beneficial owner holds a 15% stake in a company on the SDN list. What is the most appropriate immediate action?
- Proceed with onboarding but flag for enhanced monitoring
- Block the transaction and file a OFAC report if required
- Request the client divest the SDN-linked stake before onboarding
- Escalate to senior management and place the account on hold pending review (Correct answer)
Correct answer: Escalate to senior management and place the account on hold pending review
When a beneficial owner has connections to an SDN-listed entity, the account should be held and escalated for senior review before any decision is made.
Question 2: Which of the following best defines 'ownership and control' under OFAC's 50 Percent Rule?
- Any entity where a sanctioned party holds more than 25% equity
- Any entity owned 50% or more, directly or indirectly, by one or more SDN-listed persons (Correct answer)
- Any entity where a sanctioned party exercises management authority regardless of equity
- Any entity that has conducted transactions with a sanctioned country in the past 5 years
Correct answer: Any entity owned 50% or more, directly or indirectly, by one or more SDN-listed persons
OFAC's 50 Percent Rule blocks any entity owned 50% or more in aggregate by one or more SDN-listed persons, even if the entity itself is not listed.
Question 3: During enhanced due diligence on a correspondent bank, you identify that the bank operates in a jurisdiction with weak AML controls. Which risk factor is MOST relevant to sanctions exposure?
- The bank's profitability and asset size
- The volume of nested correspondent relationships the bank maintains (Correct answer)
- The bank's credit rating from major agencies
- The number of retail customers the bank serves
Correct answer: The volume of nested correspondent relationships the bank maintains
Nested correspondent relationships can obscure the true originator of transactions, creating significant sanctions evasion risk.
Question 4: A sanctions risk assessment for a money services business (MSB) should prioritize which of the following customer risk factors?
- Customer's length of time in business
- Customer's geographic reach into high-risk jurisdictions (Correct answer)
- Customer's annual revenue and profit margins
- Customer's number of employees
Correct answer: Customer's geographic reach into high-risk jurisdictions
Geographic reach into high-risk or sanctioned jurisdictions is a primary customer risk factor for MSBs given the nature of cross-border money transfers.
Question 5: What is the purpose of a 'risk-based approach' in sanctions compliance?
- To eliminate all sanctions risk through comprehensive screening
- To allocate compliance resources proportionally to the level of identified sanctions risk (Correct answer)
- To reduce compliance costs by screening fewer transactions
- To prioritize OFAC compliance over other regulatory requirements
Correct answer: To allocate compliance resources proportionally to the level of identified sanctions risk
A risk-based approach directs enhanced scrutiny and resources toward higher-risk customers, products, and geographies rather than applying uniform controls.
Question 6: Which document would be MOST useful when conducting due diligence on a foreign financial institution's sanctions exposure?
- The institution's marketing brochures and annual report
- A Wolfsberg Questionnaire completed by the institution (Correct answer)
- The institution's list of ATM locations
- A letter of reference from the institution's local regulator
Correct answer: A Wolfsberg Questionnaire completed by the institution
The Wolfsberg Questionnaire is an industry-standard tool for assessing a financial institution's AML and sanctions compliance program.
Question 7: A client states that its business partner is a government-owned entity in a partially sanctioned country. Which due diligence step is MOST critical?
- Confirm the client's credit history with the entity
- Determine if the government-owned entity is on any sanctions lists or subject to sectoral sanctions (Correct answer)
- Assess whether the entity is profitable
- Verify the entity's local business registration only
Correct answer: Determine if the government-owned entity is on any sanctions lists or subject to sectoral sanctions
Government-owned entities in partially sanctioned countries may themselves be designated or subject to sectoral sanctions, making list-screening and sanctions program analysis essential.
CSS Risk Analysis & Due Diligence 2
A compliance officer discovers that a new corporate client's beneficial owner holds a 15% stake in a company on the SDN list.
What is the most appropriate immediate action?