# AML Risk Assessments & Policies in the UAE

> Connect the risks your business faces to policies and controls that people can actually use.

An AML framework should reflect the entity's customers, services, transactions, delivery channels and geographic exposure. A generic policy rarely explains how staff should handle the risks they see.
TGA can help review the business-wide risk assessment, document gaps and organise proportionate policies and procedures for management review.

## What we cover

- **Business-wide risk assessment:** Consider inherent risks, existing controls and areas needing attention.
- **Policies and procedures:** Document responsibilities, workflows and escalation routes for the team.
- **Control review:** Identify practical improvements and a schedule for future updates.

## How we work

1. **Map the business:** Understand services, customers, locations and transaction patterns.
2. **Review controls:** Examine existing policies and how they operate in practice.
3. **Set priorities:** Prepare a focused improvement plan for management review.

## Useful information to share

- Business activity and customer profile
- Existing AML risk assessment
- Policies, procedures and control records
- Prior review findings or regulator correspondence

Risk assessments and controls should be proportionate to the entity's actual exposure and applicable supervisory requirements. Management approval and accountability remain with the business.

Official guidance: [Ministry of Economy and Tourism DNFBP guidance](https://www.moet.gov.ae/documents/20121/465917/DNFBP%2BGuidelines%2B-%2BMarch%2B2026.pdf)

Discuss the service with [TGA](https://www.tga-uae.com/contact).