An entity may start a designated service in Australia before completing initial CDD (other than account opening and deposits, market transactions and real estate, which have their own rules) only if it has taken reasonable steps to confirm an individual's identity, identified the customer's risk, collected proportionate KYC information on all section 28(2) matters other than PEP source of wealth and funds, and established the customer's identity and the identity and authority of any person acting for them. Until CDD is complete it must not transfer or make available money, property or virtual assets for the customer (other than holding them on deposit), and it must complete CDD within 20 business days after starting the service.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.