FRM Part II · FRM Exam Part II · Case Study: Financial Crime and Fraud
A bank classifies customers as low, medium or high risk, with periodic KYC refresh cycles. Which design is most consistent with a risk-based approach?
The most consistent design refreshes high-risk customers more often and lower-risk customers less often, while also triggering reviews when events such as adverse media, ownership changes or unusual activity occur. A uniform cycle or reactive reviews fail to allocate effort in proportion to risk.
- ARefresh all customers every three years, regardless of risk rating
- BRefresh high-risk customers more frequently (for example annually), lower-risk customers less often, plus event-driven reviews upon trigger eventsCorrect
- CRefresh only customers who have filed complaints
- DRefresh only when regulators request it
Explanation
A risk-based approach scales refresh frequency with risk and adds event-driven triggers such as adverse media or changed ownership. A uniform cycle ignores risk differentiation, and complaint- or regulator-driven refresh is reactive and insufficient.
Did you get it right without looking?
One question tells you little. A timed set on Case Study: Financial Crime and Fraud shows your real accuracy, how long you take and where you lose marks.
More Case Study: Financial Crime and Fraud questions
- Following a major fraud, investigators found that staff who noticed irregularities did not report them because earlier whistleblowers had be…
- A bank's transaction monitoring system generated 4,000 alerts in a quarter. Analysts closed 3,800 as false positives and escalated 200 for i…
- A bank's transaction monitoring system generated 2,000 alerts in a month. Investigators closed 1,960 as false positives and filed suspicious…
- A bank's compliance officer is reviewing its customer due diligence program. A new corporate client is a holding company whose shares are ow…
- A bank has 40 critical business services. After a payments fraud incident forced a systems shutdown, management sets an impact tolerance for…
- A bank discovers that a payment it processed involved an entity owned 60% by a person newly added to a sanctions list. Under common sanction…