Leela
Risk Assessment
RA-02

Assess the control environment and derive residual risk

Requirement

Each control that mitigates an identified risk is listed with its status and adequacy, including controls not yet implemented, and residual risk is derived per dimension and for the program overall.

Trigger

Annual

With each assessment, and whenever a control is added or fails

Action

Build the control table with status and adequacy, adjust each inherent rating for control effectiveness, and state the overall residual rating and the dimensions driving it.

Evidence
  • Control assessment and residual rating table

    Inherent, control effectiveness, and residual rating per dimension

Owner

AML Compliance Officer

Leela can
Prepare for review

Leela can prepare the artifact and hand it to a person for review.

Leela can keep the control table current from your control inventory and testing results.

Applies

Tell Leela about your company to see whether this applies.

Status
Setup needed

Tell Leela how you handle it today, or hand it over: see what’s next.

What’s next?