Summary
Board-level AML MI often defaults to operational statistics — alerts generated, cases closed, SARs filed. These metrics describe activity, not risk. Effective MI reframes the view around inherent risk, control effectiveness and residual risk relative to appetite.
Core components
A concise pack covers four areas: exposure (inherent risk by segment), control health (monitoring, screening, KYC quality), issues and remediation, and regulatory interactions.
Forward indicators
Volumes of high-risk onboardings, exit backlog, model tuning changes and control testing pass rates are earlier signals than SAR volumes.
Benchmarking cautions
Peer benchmarking of SAR volumes or alert rates is of limited value because underlying customer bases and typology mix differ. Internal trend analysis is more informative.
Escalation
The pack should include the small number of matters where the board is being asked to note, discuss or decide, rather than the full operating record.
Limitations
MI reflects framework maturity. Firms in remediation should show programme progress alongside steady-state metrics rather than substitute one for the other.
Related expertise
See AML and Financial Crime and Board oversight of financial crime risk.
Frequently asked questions
What should risk leaders know about core components?
A concise pack covers four areas: exposure (inherent risk by segment), control health (monitoring, screening, KYC quality), issues and remediation, and regulatory interactions.
What should risk leaders know about forward indicators?
Volumes of high-risk onboardings, exit backlog, model tuning changes and control testing pass rates are earlier signals than SAR volumes.
What should risk leaders know about benchmarking cautions?
Peer benchmarking of SAR volumes or alert rates is of limited value because underlying customer bases and typology mix differ. Internal trend analysis is more informative.
What should risk leaders know about escalation?
The pack should include the small number of matters where the board is being asked to note, discuss or decide, rather than the full operating record.