Article 8 › 2

When developing the supervisory methodology, the Authority shall distinguish between obliged entities, including on the basis of their activities and the type and nature of the ML/TF risks to which they are exposed. The supervisory methodology shall be risk-based and contain at least the following elements: (a) benchmarks and a methodology for classification of obliged entities into risk categories on the basis of their residual risk profile, separately for each category of obliged entities; (b) approaches to supervisory review of ML/TF risk self-assessments of obliged entities; (c) approaches to supervisory review of obliged entities’ internal policies and procedures, including their customer due diligence policies and procedures, in line with a risk-based approach to the prevention of ML/TF; (d) approaches to supervisory evaluation of risk factors inherent in, or related to, customers, business relationships, transactions and delivery channels of obliged entities, as well as geographical risk factors.

← 1 · All articles · 3 →

Source: EUR-Lex CELLAR · retrieved 2026-09-04