After review of the financial institution's enterprise-wide anti-money laundering risk assessment, the new compliance officer...

having an outdated and incomplete risk assessment could expose the financial institution to significant money laundering and terrorist financing risks that are not identified, measured, or mitigated. The risk assessment is a key component of an effective anti-money laundering program, and it should be updated regularly to reflect the changes in the business environment, customer profile, product offerings, delivery channels, and regulatory requirements12. A risk assessment that is several years old and does not cover all current products and services could fail to capture the emerging threats and vulnerabilities that the financial institution faces, and could result in inadequate or inappropriate controls, policies, and procedures. This could lead to the highest potential for unmitigated risk, as the financial institution could be exploited by money launderers and terrorist financiers, and face regulatory sanctions, reputational damage, and financial losses.

Anti-Money Laundering (AML) Risk Assessment | ACAMS1

Risk assess your business for money laundering supervision - GOV.UK2