A reporting entity must undertake an ML/TF risk assessment identifying and assessing the risks of money laundering, financing of terrorism and proliferation financing it may reasonably face in providing its designated services, with steps appropriate to the nature, size and complexity of its business (for a lead entity, of every reporting entity in its group, s 26U). Where it provides services through an Australian permanent establishment it must have regard to the kinds of designated services (including new or emerging technologies), the kinds of customers, the delivery channels (including new technologies), the countries it deals with, information AUSTRAC communicates to it about its risks, and matters in the Rules. Section 26E prohibits commencing to provide a designated service to a customer unless the assessment complies with sections 26C and 26D; each service in Australia, and each day of foreign-establishment service, is a separate civil penalty contravention.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.