In anEnterprise-Wide Risk Assessment (EWRA),residual riskis the level of risk that remains after applying mitigating controls to theinherent risk(the risk present before controls are applied).
In this scenario, theinherent risk is highdue to the nature of private banking—high net worth clients,cross-border transactions,complex ownership structures, andhigh-value financial products. However, the institution has implementedrobust CDD and EDD, as well asadvanced transaction monitoring systems.
According to the CAMS Study Guide – 6th Edition, wheneffective and properly implemented controlsare in place, they cansignificantly reducethe residual risk—even in high-risk business areas like private banking. However, no control framework caneliminate all riskentirely.
Option Ais correct: Controls can significantly reduce the residual risk when strong, effective systems and procedures are in place.
Option Bis partially true but suggests inadequacy, which is not indicated here.
Option Cincorrectly assumes residual risk cannot be lowered even with controls.
Option Dis incorrect because residual riskcannot be eliminated entirely.
[Reference: ACAMS CAMS Study Guide – 6th Edition, Chapter:Enterprise-Wide Risk Assessment (EWRA)– Section:Inherent Risk vs. Residual Risk and the Role of Controls, , , , , , ]
