Skip to main content

The purpose of this Directive is to prescribe conditions for the use of automated transaction monitoring systems (ATMS) implemented by Accountable and Reportable Institutions to identify potentially suspicious and unusual activities or transactions and to ensure that a proper governance arrangement is in place to fully comply with reporting obligations.
An overview of these conditions are set out below:

An Accountable or Reporting Institution –

secure laptop flat design

Board of directors, senior management or person exercising the highest level of authority must have adequate oversight over the process of implementing the ATMS, alert management, adequacy of rules and scenarios implemented including testing. Alerts generated by the ATMS’s must be reported to the Centre within the prescribed period.

hourglass flat design

Must have adequate resources to manage the volume of alerts generated. Such resources must have the required level of skill. Responsibilities for reviewing, investigating and reporting of alerts must be defined.

books flat design

Must document all investigations and decisions taken relating to alerts generated by the ATMS and kept in a manner readily accessible to Regulators.

security flat design

Must ensure that Where a suspicious or unusual transaction or activity is detected by a reporter in an instance other than through the ATMS, the reporter must ensure that the ATMS detection rules are developed and implemented to enable future detection of similar scenarios via the ATMS.

document flat design

Make provision for manual reports from internal stakeholders and not solely rely on ATMS.

phones flat design

Ensure that the detection methodology and effectiveness of an ATMS are validated and tested at least annually. Configuration changes must follow a governance process and have full audit trail capabilities. The detection methodology including, algorithms, scenarios, threshold settings or rules used by the ATMS must be sufficient to address the associated money laundering and terrorist financing risks applicable to the institution.

report flat design

Must ensure that the process for investigation of alerts, subsequent reporting and ongoing risk assessment of the model and tuning methodology should be included in the RMCP.

For More Information

Contact Us Today!

Compiled By: Sholane Sathu
Engagement Professional: Adept Advisory