Financial Crime Compliance and Risk Management Training Course

Duration 10 days 20 modules · 65 contact hours
Level Intermediate Certificate on completion
Who attends Financial Crime Compliance Manager, AML or KYC Analyst and others
Fee from USD 2,200 KSh 190,000 for Kenyan organisations
Where 52 cities + online See dates by city
Next start 16 Nov 2026 Course code SD-FFC-015

Before you join: Participants should have working familiarity with business controls, risk management, compliance operations, fraud prevention, customer onboarding or internal audit.

Dates & prices

Two start dates a month in every city, and live online on weekdays or weekends. Fees are per participant; classroom fees include tuition, materials, lunch and refreshments, and the certificate.

Suggest a date or city

Showing the next six months. Later dates, other cities and private deliveries for your team are available on request.

Course overview

Financial crime failures expose banks, public bodies, insurers, payment firms and multinational companies to direct losses, regulatory action, correspondent banking restrictions, damaged customer trust and personal accountability for senior managers. Effective control requires more than screening software or written policies. Teams must identify exposure, assess customer and third-party risk, detect unusual activity, investigate concerns, make defensible decisions and report matters through the correct channels.

This course examines the control framework for fraud, money laundering, terrorist financing, sanctions breaches, bribery and corruption, insider abuse and cyber-enabled financial crime. Participants apply the FATF risk-based approach, customer due diligence standards, transaction monitoring methods, sanctions screening controls, fraud risk assessment and case investigation techniques. They learn how governance, data quality, model performance, reporting, assurance and remediation work together within a financial crime programme.

Instructor-led briefings are combined with sector-based cases, document reviews, group analysis, investigation simulations and structured application planning. Participants progressively build a financial crime risk register, customer risk model, alert investigation record, control-testing plan and management reporting pack. The final capstone requires participants to assemble and present a complete financial crime compliance and risk management plan for a realistic organisation.

The course suits professionals who already work with compliance, risk, operations, audit, investigations or financial controls and need a practical operating view of financial crime management.

What you will be able to do

  • Assess financial crime exposure using a risk-based methodology and documented risk register
  • Design customer risk ratings using due diligence evidence, risk factors and review triggers
  • Apply transaction monitoring, sanctions screening and alert triage methods to suspicious activity
  • Investigate financial crime cases using evidence plans, interview methods and case documentation
  • Evaluate fraud, bribery and corruption controls against identified threat scenarios
  • Prepare suspicious activity reports and internal escalation records with defensible rationale
  • Test financial crime controls using sample selection, walkthroughs and remediation tracking
  • Present a complete financial crime compliance and risk management plan to senior stakeholders

Benefits of attending

For you

  • Improved judgement when assessing customer, transaction and third-party financial crime risk
  • Stronger capability to document defensible alert, investigation and escalation decisions
  • Practical templates for building financial crime controls and remediation plans
  • Greater confidence challenging weak due diligence, monitoring and screening arrangements
  • A certificate of completion supporting progression into financial crime roles

For your organisation

  • More consistent risk assessments across customers, products, channels and jurisdictions
  • Better quality alert investigations, escalation records and suspicious activity reporting
  • Earlier identification of fraud, sanctions and money-laundering control gaps
  • Clearer management information for senior leaders and board risk committees
  • More targeted remediation activity following audit, regulatory or incident findings

Course modules

20 modules over 10 days

Participants can map financial crime exposure and assign accountability within a control framework.

  • Financial crime typologies: fraud, laundering, terrorist financing, sanctions evasion
  • Three lines model responsibilities for business, compliance, and internal audit
  • FATF risk-based approach and national risk assessment drivers
  • Map products, customers, channels, geographies, and transaction exposure
  • Define financial crime appetite, tolerance statements, and escalation thresholds
  • Connect conduct risk, prudential risk, and financial crime failures

Participants can design governance structures, policies and reporting routes for financial crime oversight.

  • Board oversight, senior manager accountability, and committee reporting structures
  • Policy hierarchy: standards, procedures, playbooks, and control owner responsibilities
  • Set delegated authorities for onboarding, exceptions, exits, and disclosures
  • Issue management workflow from identification through closure validation
  • Document policy exceptions with compensating controls and approval evidence
  • Management information indicators for exposure, alerts, backlogs, and remediation

Participants can produce a documented financial crime risk assessment with prioritised treatments.

  • Inherent risk scoring using impact, likelihood, velocity, and control dependence
  • Risk taxonomy covering customer, product, channel, jurisdiction, and third-party threats
  • Assess control design effectiveness against defined financial crime scenarios
  • Calculate residual risk using evidence, control performance, and uncertainty
  • Build heat maps without masking high-impact low-frequency threats
  • Translate risk assessment findings into funded treatment actions

Participants can apply proportionate customer due diligence and maintain defensible customer files.

  • Customer identification requirements for individuals, entities, trusts, and partnerships
  • Verify beneficial ownership using registries, documents, and corroborating sources
  • Purpose and intended nature statements tested against expected activity
  • Enhanced due diligence triggers for higher-risk customers and relationships
  • Source of wealth and source of funds evidence assessment
  • Periodic review cycles driven by risk rating and trigger events

Participants can build and challenge a customer risk-rating methodology using explainable factors.

  • Risk factor weighting for geography, occupation, ownership, products, and behaviour
  • Scorecards distinguish inherent customer risk from control-adjusted residual risk
  • Calibrate rating bands using portfolio data and expert judgement
  • Override governance for exceptional ratings and documented approval decisions
  • Test model outcomes for missing data, bias, and false assurance
  • Review-trigger rules following ownership, activity, sanctions, or adverse-media changes

Participants can assess monitoring alerts, prioritise cases and document triage decisions.

  • Monitoring scenarios for structuring, rapid movement, mule activity, and layering
  • Alert thresholds calibrated against customer profiles and expected activity
  • Triage queue design using risk, urgency, materiality, and ageing
  • Investigate transactional anomalies through chronology, counterparties, and narrative analysis
  • False-positive analysis identifies scenario weaknesses and data-quality defects
  • Case closure rationale links evidence, risk indicators, and decisions

Participants can assess sanctions exposure and operate screening, escalation and disposition controls.

  • Sanctions regimes: United Nations, OFAC, European Union, and United Kingdom
  • Screen customers, beneficial owners, payments, vessels, and trade counterparties
  • Name-matching logic, fuzzy matching, transliteration, and alias management
  • Differentiate true matches, false positives, and potential sanctions breaches
  • Escalate asset freezes, rejected transactions, and licensing questions
  • Screening-list updates, audit trails, and system-change control evidence

Participants can assess PEP and adverse-media exposure using evidence-based enhanced due diligence.

  • PEP definitions, family members, close associates, and domestic exposure
  • Risk indicators for public procurement, state-owned entities, and extractive industries
  • Adverse-media searches using source reliability, relevance, recency, and corroboration
  • Distinguish allegations, investigations, convictions, and unsupported online content
  • Senior management approval for higher-risk PEP relationships
  • Document monitoring intensity, review frequency, and exit decision rationale

Participants can identify fraud schemes and design preventive, detective and responsive controls.

  • Fraud Triangle analysis of pressure, opportunity, and rationalisation
  • Map occupational fraud schemes using the ACFE fraud tree
  • Procurement fraud indicators: bid rigging, conflicts, split purchases, kickbacks
  • Payment fraud controls: segregation, callback verification, and beneficiary validation
  • Data analytics tests for duplicate vendors, unusual journals, and round amounts
  • Fraud response plans preserve evidence, contain loss, and assign ownership

Participants can assess corruption exposure and establish proportionate third-party controls.

  • ISO 37001 anti-bribery management system control requirements
  • Corruption risk assessment for licences, gifts, donations, and sponsorships
  • Third-party due diligence for agents, distributors, consultants, and intermediaries
  • Red flags: excessive commissions, opaque ownership, and unusual payment routes
  • Contractual controls covering audit rights, compliance clauses, and termination
  • Monitor third-party activity through invoices, deliverables, and periodic certification

Participants can identify cyber-enabled financial crime patterns and coordinate control responses.

  • Business email compromise indicators and payment diversion response procedures
  • Account takeover patterns, credential misuse, and anomalous device activity
  • Mule-account detection through network links, velocity, and shared identifiers
  • Cryptocurrency exposure: wallet screening, blockchain tracing, and travel rule considerations
  • Coordinate fraud, cybersecurity, operations, and compliance incident responsibilities
  • Preserve digital evidence using chain-of-custody and access-control records

Participants can plan and conduct structured financial crime investigations with reliable documentation.

  • Investigation scoping defines allegation, subjects, timeframe, and key questions
  • Evidence plans identify records, custodians, sources, and preservation requirements
  • Chronologies organise transactions, communications, events, and decision points
  • Interview planning uses PEACE principles and corroboration objectives
  • Analyse relationships through entity charts, funds flows, and ownership links
  • Investigation reports separate facts, inferences, findings, and recommendations

Participants can make and document appropriate internal and external suspicious activity reporting decisions.

  • Reasonable grounds for suspicion distinguished from proof of criminality
  • Internal escalation reports capture facts, indicators, analysis, and urgency
  • Suspicious activity report narratives explain who, what, when, where, and why
  • Tipping-off restrictions and confidentiality controls during active reviews
  • Consent, defence, and transaction-hold decisions under applicable procedures
  • Maintain filing records, supporting evidence, and post-report monitoring plans

Participants can identify financial crime data weaknesses and define effective system control requirements.

  • Critical data elements for onboarding, screening, monitoring, and investigations
  • Data lineage traces fields from source systems to compliance decisions
  • Reconciliation controls identify missing customers, transactions, and screening populations
  • Scenario tuning governance documents assumptions, approvals, and performance evidence
  • Model validation tests coverage, outcomes, stability, and conceptual soundness
  • Change management protects screening and monitoring configuration integrity

Participants can test financial crime controls and report findings with practical remediation actions.

  • Control objectives translated into test steps and observable evidence
  • Walkthroughs trace a control from trigger through documented completion
  • Sample selection considers risk, population completeness, and exception history
  • Test operating effectiveness through reperformance, inspection, and inquiry
  • Rate findings by root cause, impact, likelihood, and recurrence
  • Remediation plans specify owners, milestones, validation, and closure criteria

Participants can prepare evidence, responses and action plans for assurance reviews and examinations.

  • Regulatory request logs assign owners, deadlines, evidence, and quality review
  • Evidence packs connect policies, procedures, systems, cases, and governance minutes
  • Prepare clear responses without unsupported assurances or legal conclusions
  • Root-cause analysis uses five whys and causal factor mapping
  • Track matters requiring attention through accountable remediation governance
  • Challenge closure evidence before representing issues as fully resolved

Participants can design management information that supports informed financial crime decisions.

  • Key risk indicators measure exposure, control strain, and emerging threats
  • Key performance indicators measure throughput, quality, timeliness, and productivity
  • Backlog ageing analysis identifies operational risk and resource shortfalls
  • Quality assurance results reveal recurring decision and documentation defects
  • Dashboard design distinguishes strategic indicators from operational management data
  • Board reports explain trends, exceptions, decisions required, and risk acceptance

Participants can convert programme weaknesses into controlled remediation and sustainable change plans.

  • Prioritise remediation using risk severity, regulatory urgency, and dependency mapping
  • Target operating model defines processes, roles, systems, and governance
  • RACI matrices clarify accountability for programme implementation activities
  • Training needs analysis links roles to control responsibilities and competence
  • Implementation roadmaps sequence quick fixes, system changes, and assurance reviews
  • Benefits tracking measures risk reduction, quality improvement, and closure sustainability

Participants can adapt financial crime controls to sector-specific and cross-border operating risks.

  • Retail banking risks: cash activity, mule accounts, and identity fraud
  • Corporate banking risks: trade finance, shell entities, and correspondent relationships
  • Public-sector risks: procurement corruption, grants, and beneficial ownership opacity
  • Payment-firm risks: rapid onboarding, cross-border transfers, and merchant fraud
  • Multinational risks: local intermediaries, facilitation payments, and decentralised controls
  • Cross-border investigations manage data privacy, legal privilege, and information sharing

Participants can build, review and present a complete financial crime compliance and risk management plan.

  • Define organisational profile, regulatory obligations, and priority threat scenarios
  • Build inherent and residual risk assessments with documented scoring rationale
  • Design customer due diligence, monitoring, screening, and investigation controls
  • Set governance, reporting, assurance, training, and escalation arrangements
  • Create remediation roadmap with owners, milestones, dependencies, and success measures
  • Present risk decisions, control rationale, and resource requirements to senior management

Exercises and examples are adapted to each cohort's sectors and roles.

What you take back to work

  1. Financial crime risk assessment template
  2. Customer risk-rating scorecard
  3. Alert investigation case file
  4. Sanctions screening disposition checklist
  5. Control-testing and remediation tracker
  6. Financial crime management reporting pack

Who should attend

  • Financial Crime Compliance Manager — responsible for designing and maintaining programme controls
  • AML or KYC Analyst — needs stronger risk assessment and escalation judgement
  • Fraud Risk Manager — requires integrated fraud and financial crime control methods
  • Internal Auditor — tests financial crime governance, controls and remediation evidence
  • Risk Manager — connects enterprise risk processes with financial crime exposure
  • Operations Manager — manages frontline controls, alerts and customer onboarding decisions

Skills and tools covered

Financial crime risk assessmentCustomer due diligenceSanctions controlsFraud investigationControl testingRegulatory reporting

Tools and standards

FATF Recommendations, ISO 37001, ACFE Fraud Tree, PEACE interviewing model

How the course runs

Training methodology

Teaching combines short technical briefings with realistic cases from banking, payments, public procurement and multinational operations. Participants review customer files, map transaction flows, assess alert evidence, draft escalation decisions and test controls against defined scenarios. Group exercises examine competing risk indicators and reporting decisions, while simulations develop investigation and stakeholder communication skills. Application planning links each method to participants’ own policies, systems, governance arrangements and priority risks. Trainers provide structured feedback on working papers, decision rationale and final capstone presentations.

Requirements and prerequisites

Participants should have working familiarity with business controls, risk management, compliance operations, fraud prevention, customer onboarding or internal audit. Experience reviewing customer records, transactions, policies, exceptions or control evidence is useful. The course assumes participants can read basic financial and operational information and contribute to structured case discussions. Prior specialist certification in anti-money laundering, sanctions, forensic accounting or investigations is not required. No programming, statistical modelling or legal qualification is required, although participants should bring examples of their own control environment where permitted.

A typical training day

08:30 – 10:30First session
10:30 – 10:45Refreshment break
10:45 – 12:30Second session
12:30 – 13:30Lunch and networking
13:30 – 15:00Third session
15:00 – 15:15Refreshment break
15:15 – 16:30Workshop and daily review

Live online deliveries follow the same structure in East Africa Time, with shorter screen blocks and longer breaks.

What the fee includes

  • Instruction by a practitioner facilitator
  • Full course workbook and materials
  • Exercise files, templates and case studies
  • Refreshments and lunch on classroom deliveries
  • Certificate of completion
  • Post-course application plan

Frequently asked questions

Participants should understand basic business controls, compliance operations, risk management, fraud prevention or audit work. Specialist anti-money laundering or sanctions qualifications are not required.

Bring a laptop if attending in person and any non-confidential examples of policies, risk registers, alert processes or control issues. Course materials and case documents are provided.

It is designed for compliance, AML, KYC, fraud, risk, operations, audit and investigation professionals with existing workplace experience. It also suits managers assuming responsibility for financial crime controls.

AML is a major component, including due diligence, monitoring and suspicious activity reporting. This course also covers fraud, sanctions, bribery, cyber-enabled crime, governance, assurance and programme remediation.

Participants build reusable working documents throughout the course, including risk assessments, customer-rating models and control-testing plans. These can be adapted to their organisation’s policies, systems and regulatory obligations.

Each training day runs from 08:30 to 16:30 and provides about 6.5 contact hours. The first week establishes risk, due diligence, monitoring and fraud methods; the second week focuses on investigations, assurance, reporting, remediation and the capstone.

Questions about this course?

Ask about dates, fees, group bookings or running it for your team. Our training team replies by email.