Risk assessment
A structured evaluation of the risks a firm faces, used by supervisors to set intensity and by firms to prioritise controls.
Overview
Supervisors assess firms’ risk profiles to decide how closely to supervise them. Firms are also expected to run their own risk assessments, for example for money laundering, cybersecurity and third parties.
It connects most directly to Supervisory review, Anti-money laundering and Vendor risk management.
Check the official sources below for legal scope, applicable dates and exceptions. This entry is an explanatory reference, not legal advice.
Why it matters
A risk assessment that is out of date is one of the first things examiners notice.
Who it affects
All regulated organisations.
Where it sits
Ten linked steps connect where you operate to the proof that you complied.
- 01Jurisdiction
- 02Industry
- 03Activity
- 04Authority
- 05Regulation
- 06Requirement
- 07Guidance
- 08Control
- 09Evidence
- 10Enforcement
Connections
The terms most closely tied to Risk assessment. Select one to open it.
What to do about it
- 1Keep an always-current readiness snapshot.
- 2Map the supervisor’s manuals and expectations to controls.
- 3Turn every finding into a tracked corrective action.
- 4Prove each action is complete and effective.
From requirement to evidence.
Regulation Layer weights controls by risk and shows the riskiest sectors where the needle lands.
Request early access →