Where the reporting entity is not an individual its AML/CTF policies must ensure the governing body is sufficiently informed of the ML, TF and proliferation financing risks the entity may reasonably face (s 26F(4)(a)) and deal with giving it the information it needs to discharge its s 26H oversight duties (Rules 5-6). Rules 5-7 requires the governing body to receive reports from the AML/CTF compliance officer, at least once every 12 months, on compliance with the AML/CTF policies, how well the policies manage and mitigate the risks, and compliance with the Act, regulations and Rules; the reporting requirement does not apply to an individual entity or where the compliance officer is also the governing body.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.