Customer due diligence (CDD) is a structured procedure through which financial institutions identify, verify, and understand their customers to manage risks related to anti-money laundering (AML) and counter-financing of terrorism (CFT), while ensuring compliance with regulations. AML compliance forms a vital part of CDD, assisting institutions in preventing financial crimes and avoiding regulatory sanctions. This process supports global Know Your Customer (KYC) frameworks and is mandated by standards such as the Financial Action Task Force (FATF) 40 Recommendations (updated 2012) and, within the European Union, by the 4th to 6th Anti-Money Laundering Directives. CDD also plays a fundamental role within broader financial crime compliance systems. The significance of CDD and related automation tools lies in their capacity to prevent financial crimes, uphold compliance, and enhance operational efficiency, particularly as regulatory demands evolve and data complexity grows.
InvestGlass offers an integrated Swiss sovereign CRM and automation platform tailored for financial institutions, combining compliance workflows with digital onboarding. The platform supports regulated organisations by streamlining sales, compliance, and customer engagement processes. This guide provides a practical, step-by-step overview aimed at compliance, risk, and operations teams in regulated sectors. Diligence is vital in CDD to meet regulatory standards, prevent fraud, and manage risk effectively. InvestGlass can be hosted in Switzerland or deployed on-premise, enabling organisations to retain control over sensitive financial data while fulfilling regulatory obligations. Whether onboarding new clients in 2026 or managing ongoing relationships, the principles and workflows outlined here will help establish a robust CDD process that complies with regulations and supports business growth.
什么是客户尽职调查（CDD）？
Customer due diligence (CDD) is the systematic process of collecting, verifying, and evaluating information about individuals or legal entities to ascertain their identity, understand their business activities, and assess their potential financial crime risk, with particular focus on identity verification as a key step. Confirming the customer’s identity is crucial for compliance with AML and KYC regulations. CDD assists financial institutions in identifying and mitigating risks such as money laundering and terrorist financing by verifying identities and evaluating risk profiles. This diligence is essential for regulatory compliance, fraud prevention, and safeguarding the organisation’s reputation by ensuring adherence to legal requirements and preventing financial crime.
反洗钱/打击资助恐怖主义行为（CDD）、了解你的客户（KYC）和反洗钱/打击资助恐怖主义行为（AML/CFT）之间的关系
The connection between CDD, KYC, and AML/CFT forms the foundation of financial crime compliance:
- AML (Anti-Money Laundering): Laws and procedures aimed at stopping criminals from disguising illegally obtained funds as legitimate income.
- CFT (Counter-Financing of Terrorism): Measures designed to detect and prevent the use of financial systems to fund terrorism.
- KYC (Know Your Customer): The overarching framework that includes CDD and ongoing client management to ensure institutions know and monitor their customers.
- CDD (Customer Due Diligence): The focused process within KYC dedicated to identifying, verifying, and assessing customer risk.
In practice, AML/CFT regulations require financial institutions to implement KYC programmes, operationalised through thorough CDD processes. Thus, CDD is the operational heart of KYC, both critical for AML/CFT compliance.
学期 | 定义 |
|---|---|
CDD | The targeted process of identifying, verifying, and assessing customer risk |
KYC | 更广泛的框架包括 CDD 和持续关系管理 |
AML | Anti-money laundering regulations mandating CDD requirements |
CFT | Counter-terrorist financing rules requiring identification of terrorism financing risks |
Key regulatory references include the FATF 40 Recommendations and the US Financial Crimes Enforcement Network (FinCEN) CDD Rule (effective May 11, 2018), which mandates four core elements of due diligence. |
典型的 CDD 流程要素
The customer due diligence process generally involves:
- Collecting identity data (name, date of birth, nationality, address)
- Gathering beneficial ownership information
- Understanding source of funds and wealth
- Anticipating account activity and transaction patterns
- Considering geographic and sector exposures
- Assessing the customer’s risk profile based on gathered information
CDD applies to individuals, corporations, trusts, foundations, and other entities, with the depth of scrutiny varying according to the customer’s risk profile. In Switzerland, diligence requirements are governed by the Swiss Anti-Money Laundering Act (AMLA) and FINMA ordinances, which stress risk-based controls and detailed documentation. A comprehensive diligence approach includes both identity verification and risk profiling to ensure compliance and effective risk management.
客户尽职调查为何对金融机构至关重要
Between 2015 and 2024, global AML fines surpassed $20 billion. The Danske Bank scandal alone resulted in $2 billion in penalties linked to insufficient CDD on $230 billion of suspicious transactions via its Estonian branch. Credit Suisse was fined $475 million by FINMA in 2022 for repeated AML failures, contributing to its collapse in 2023. Neglecting to assess risks during customer due diligence can lead to severe regulatory penalties and reputational harm for financial institutions.
通过有效的 CDD 预防金融犯罪
Effective customer due diligence helps prevent financial crimes such as:
- Money laundering (estimated at $800 billion to $2 trillion annually by the United Nations)
- 资助恐怖主义
- 逃避制裁
- 欺诈和腐败
- 逃税
监管利害关系
The consequences of non-compliance extend beyond fines:
风险类别 | 潜在后果 |
|---|---|
行政管理 | 罚款最高可达年营业额的 10%（欧盟反洗钱法），补救令 |
犯罪 | 6AMLD 下高级管理层的个人责任 |
运行 | 许可证限制、失去代理行关系 |
声誉 | Client loss, rating downgrades, increased media scrutiny |
Following the Danske Bank case, Nordic banks lost 20-30% of high-risk relationships as counterparties de-risked exposure to institutions with weak controls. |
健全的 CDD 的战略优势
Beyond avoiding fines, strong CDD provides strategic advantages:
- Deeper client insights and needs understanding
- Improved customer segmentation and cross-selling (15-20% revenue increase per McKinsey)
- Better risk-based pricing
- Stronger client relationships built on transparency
InvestGlass reduces compliance risk through standardised workflows and reputational risk via transparent audit trails documenting CDD at every stage.
Transition: Recognising CDD’s significance leads to exploring the various due diligence types financial institutions must implement. The following section outlines these types and their practical applications.
客户尽职调查的主要类型
Financial institutions apply three primary due diligence categories worldwide, as outlined by FATF and EU AML directives. The chosen CDD type depends on the customer’s risk profile and business relationship.
CDD 类型概述
CDD 类型 | 说明 | 何时应用 |
|---|---|---|
标准 CDD | Baseline checks for low to medium risk customers | 大多数客户的个人资料简单明了 |
强化尽职调查（EDD） | In-depth scrutiny for high-risk cases (e.g., PEPs, high-risk jurisdictions) | High-risk clients or complex structures |
简化/持续的尽职调查 | Reduced measures for negligible risk or continuous monitoring | 低风险或持续性关系 |
During onboarding, institutions evaluate each customer’s risk to ensure compliance and effective risk management. | ||
Customers are classified based on factors such as: |
- PEP status (politically exposed persons with elevated corruption risk)
- Presence on FATF grey/black lists or exposure to high-risk jurisdictions
- 复杂的企业结构
- Unusual transaction patterns or adverse media reports
The depth and frequency of checks, documentation, and approvals increase with risk level. InvestGlass supports configuring different workflows and data requirements based on CDD type and risk category.
标准客户尽职调查
Standard CDD serves as the default level for most customers who are not high risk, for example, residents in low-risk countries with straightforward employment or business activities.
个人核心要素
- 护照或国民身份证明
- Verification using independent, reliable sources
- Basic understanding of the relationship’s purpose and expected activity
- Ongoing monitoring to ensure activities align with risk profile and detect any changes signalling increased risk or illicit conduct
Core Elements for Legal Entities
- 法定名称、注册号、注册地址
- Directors and shareholders holding above thresholds (typically 25% beneficial ownership under FinCEN and EU rules)
- Entity’s purpose and expected activities
Standard CDD should be consistently documented using checklists and forms, ideally digitised within the CRM to minimise errors and omissions.
强化尽职调查（EDD）
Enhanced due diligence applies more rigorous scrutiny to high-risk customers such as:
- Politically exposed persons (PEPs) and their associates
- 来自高风险辖区（欧盟高风险第三国名单、FATF 灰色名单）的客户
- High-risk sectors like casinos, virtual assets, correspondent banking
- Complex ownership structures, offshore trusts, and layered holding companies
Additional EDD Measures
- Detailed documentation of source of funds and wealth
- Corroborating evidence such as audited accounts, contracts, inheritance papers
- 广泛的不良媒介筛查
- Senior management or compliance approval
- More frequent reviews (annual or quarterly)
InvestGlass can automate EDD triggers based on risk scoring, for example, escalating cases when a PEP or sanctioned country is detected, routing workflows accordingly.
持续和事件驱动的尽职调查
CDD is an ongoing process. Continuous monitoring of transactions, behaviour, and external data occurs throughout the customer lifecycle.
Ongoing CDD enables institutions to adapt to changes that may alter a customer’s risk profile, thereby mitigating risks over time.
持续的尽职调查包括
- Monitoring transactions against expected patterns
- 根据最新的制裁、PEP 和负面媒体名单重新筛查
- 根据风险评级进行定期审查
Event-Driven Reviews Triggered By
- Sudden transaction volume increases (20-50% deviations)
- Change of residence to higher-risk jurisdictions
- Changes in corporate leadership
- 复杂新任务的入职
Within InvestGlass, ongoing CDD is supported by scheduled review tasks, automated alerts for unusual activity, and refreshed customer screening.
Transition: Having reviewed CDD types, the next section examines the core components and practical steps for establishing a compliant and effective CDD process.
客户尽职调查流程的核心要素
The typical CDD lifecycle includes:
- 客户识别
- 验证
- 风险评估
- Determination of CDD level
- 入职决定
- 持续监测和审查
This section offers a practical guide for compliance and operations teams to adapt into internal procedures and checklists. InvestGlass enables mapping these elements into configurable, automated workflows with audit trails.
客户身份识别
针对个人，收集：
- 法定全名
- 出生日期和地点
- 国籍
- 居住地址
- 税号
- 联系方式
- 职业和雇主
对于法人实体，请收集：
- 注册名称和注册编号
- 成立日期和注册办事处
- 法律形式和目的
- 董事名单
- Controlling shareholders and beneficial owners
For private banks and wealth managers, capturing relationship context is vital, including mandate types, family office structures, and related trusts or foundations.
InvestGlass digital onboarding forms can be customised per segment (retail, HNWIs, corporate, public sector) and support multiple languages.
客户验证
Identity data must be verified using reliable, independent sources before establishing the relationship, as required by AML regulations such as EU 5AMLD, Swiss AMLA, and UK MLR 2017.
个人验证方法
- Checking biometric passports or national IDs
- Conducting liveness checks via video ID
- 通过可信数据库或公用事业账单验证地址
企业验证方法
- 官方公司注册（瑞士商业注册处、英国公司注册处、欧盟商业注册处）
- 经认证的公司注册文件
InvestGlass integrates with third-party e-ID, sanctions, and registry providers via API to streamline identity verification and reduce manual review.
实益拥有权和控制权
Regulators increasingly focus on beneficial ownership transparency, driven by the FinCEN CDD Rule (2018) and EU beneficial ownership register mandates.
Institutions must identify natural persons owning or controlling legal entities above thresholds, typically 25%, with lower thresholds for higher-risk cases.
复杂结构的挑战
- 多个所有权层
- 被提名股东
- Trusts and foundations in jurisdictions with limited records
Surveys indicate 30-40% failure rates in tracing multi-layer ultimate beneficial owners (UBOs).
InvestGlass data models capture complex ownership and control structures, maintaining structured records for audits and regulator requests.
风险概况评估
The aim is to assign a risk rating (low, medium, high) based on multiple factors. Risk assessment helps determine scrutiny levels and identify red flags to prevent illicit activities.
风险因素 | 实例 |
|---|---|
客户类型 | PEP 身份、公司复杂性 |
地理 | 高风险国家、制裁风险 |
产品 | 跨境支付、虚拟资产 |
行为 | Transaction patterns vs peer benchmarks |
外部数据 | 制裁打击、不利媒体 |
Quantitative scores and qualitative judgments combine into a risk scorecard. InvestGlass supports configurable scoring models, automatic risk ratings, and overrides with documented rationale. |
确定 CDD 的适当级别
Risk ratings guide diligence measures:
风险评级 | CDD 级别 | 文件 | 批准 |
|---|---|---|---|
低 | 简化版 | 基本身份证、住址证明 | 自动化 |
中型 | 标准 | 全套文件 | Relationship Manager sign-off |
高 | 增强型 | EDD 套餐，财富之源 | Senior or compliance approval |
Clear policies and decision rules enhance consistency and speed onboarding. InvestGlass workflows apply branching rules with mandatory fields and checks per risk category. |
持续监测和定期审查
Continuous monitoring involves tracking transactions, behaviour, and profile changes to detect suspicious patterns.
Review Frequencies
- Low risk: every 3-5 years
- 中度风险：每 2-3 年一次
- High risk: annually or more often
Re-screening against updated sanctions, PEP, and adverse media lists is crucial after geopolitical events or list updates from authorities such as OFAC (US), EU, or SECO (Switzerland).
InvestGlass schedules review tasks, alerts relationship managers when data is outdated, and logs all review activities for regulatory evidence.
升级和可疑活动报告
When suspicious activity is detected, institutions follow escalation processes that may lead to Suspicious Activity Reports (SARs) or Suspicious Transaction Reports (STRs) filed with Financial Intelligence Units like MROS (Switzerland) or FinCEN (US).
Escalation Process
- Front-line staff or monitoring tools flag concerns
- Compliance team reviews cases
- Decision to report suspicious transactions or terminate relationships
Comprehensive CDD documentation, including risk scores and decisions, supports these processes and regulator inquiries. InvestGlass stores case files, documents, and logs decisions, integrating with case management or reporting tools as needed.
Transition: Having outlined core CDD elements, the next section reviews regulatory frameworks shaping these requirements globally and regionally.
监管框架和全球 CDD 要求
This section summarises key regulations guiding CDD requirements for banks and regulated firms internationally.
While terminology varies, most regimes expect:
- 客户识别与验证
- Beneficial ownership understanding
- Risk-based application of measures
- Continuous relationship monitoring
Cross-border institutions often harmonise group-wide standards. InvestGlass supports multiple regulatory rulesets and documentation standards per jurisdiction, which is increasingly important as AI reshapes areas such as central banking and monetary policy governance.
金融行动特别工作组的建议和国际标准
The Financial Action Task Force (FATF) issues global AML/CFT standards via its 40 Recommendations, covering CDD, PEPs, and beneficial ownership transparency.
FATF mutual evaluations influence national implementations and supervisory scrutiny. Switzerland’s 2016 “largely compliant” rating led to improvements by 2022.
FATF endorses a risk-based approach, permitting simplified measures for low-risk customers and EDD for higher-risk ones. Aligning policies with FATF aids cross-border operations and regulator engagement.
欧盟反洗钱指令
The EU has strengthened CDD through directives:
指令 | 年份 | Key Enhancements |
|---|---|---|
4AMLD | 2015 | 实益拥有权登记册，基于风险的方法 |
5AMLD | 2018 | 扩展 PEP 定义、虚拟资产、更严格的 EDD |
6AMLD | 2020 | Senior management criminal liability |
The EU AML Package and upcoming AML Authority will further harmonise obligations. | ||
InvestGlass accommodates jurisdiction-specific fields and supports cross-border consistency. |
美国金融犯罪执法网客户尽职调查规则
Effective May 11, 2018, FinCEN’s CDD Rule requires covered institutions to:
- 识别和验证客户
- Identify and verify beneficial owners (25% threshold)
- Understand relationship nature and purpose
- Conduct ongoing monitoring and suspicious activity reporting
This rule complements the 2020 AML Act and 2024-25 Corporate Transparency Act introducing a federal beneficial ownership database.
InvestGlass aligns onboarding workflows with these elements and captures required ownership data for US branches.
瑞士《反洗钱法》和 FINMA 的期望
Swiss AML laws require:
- Identification of contracting parties and beneficial owners
- Clarification of economic background for higher-risk cases
- 强调文件质量和关系理解
- 基于风险的监管，特别是对私人银行和财富管理的监管
Swiss data protection and banking secrecy laws necessitate strict confidentiality and data sovereignty. InvestGlass is a Swiss sovereign solution with Swiss-hosted or on-premise deployments, supporting compliance and privacy.
Transition: Regulatory frameworks establish standards, but sector-specific practices vary. The next section examines CDD application in different financial sectors.
客户尽职调查实践：银行、财富管理公司和保险公司
While CDD principles are consistent, application varies by business model, client complexity, and transaction volume.
零售和商业银行
High-volume onboarding for accounts, loans, and SME banking requires efficient digital CDD to avoid delays.
Focus Areas
- Standardised identity checks with automated sanctions and PEP screening
- Risk scoring based on products and geography
- Feedback loops from transaction monitoring to update risk assessments
InvestGlass enables pre-filled forms, data reuse across products, and straight-through processing for low-risk clients.
私人银行和财富管理机构
High-net-worth clients often have complex structures including trusts and family offices, with 20-30% linked to PEPs, which increases the need for specialised CRM for private banks to centralise KYC, portfolio and relationship data.
挑战
- Intensive EDD for cross-border clients
- Complex portfolios and bespoke products
- Balancing client experience with regulatory demands
InvestGlass integrates CRM, 利用人工智能进行投资组合管理, and CDD, allowing relationship managers to access risk profiles, KYC documents, and investment data seamlessly.
Insurance, Asset Management and Other Sectors
Life insurers, asset managers, advisers, and real estate firms also face CDD obligations aligned with AML and LCB-FT regulations.
Sector Considerations
- Life policies as potential money laundering channels
- 有代理人安排的投资基金
- Property transactions requiring buyer and beneficial owner identification
InvestGlass customises forms and workflows for sector-specific data alongside standard CDD, from wealth management to specialised CRM for dental practices that must also respect data protection and identification rules.
Transition: As CDD complexity grows, technology and automation become critical. The next section explores how RegTech solutions like InvestGlass enhance CDD.
从手动 CDD 到自动 CDD：技术和监管科技的作用
Manual, paper-based CDD processes incur high costs and delays. Research shows manual onboarding averages $500 per client and 40-day cycles. Automation can reduce onboarding to under 5 minutes for simple cases.
手工 CDD 的挑战
Manual processes increase:
- Onboarding time and client dropouts
- Operational expenses
- Error rates and compliance risks
- Difficulty managing complex clients
InvestGlass is a Swiss RegTech and WealthTech platform designed for regulated sectors.
数字化入职和电子 KYC
Digital onboarding enables customers to complete forms, upload documents, and perform automated KYC verification checks remotely.
益处
- Dynamic forms adapting to customer type, country, and risk
- Faster onboarding with fewer drop-offs
- 提高数据质量
- Direct integration with CRM and portfolio systems
InvestGlass supports white-label portals and digital onboarding for compliant, branded experiences.
筛查和不良媒体监测
Automated tools continuously screen customers against:
- 制裁名单（外国资产管理处、欧盟、联合国、东南欧合作组织）
- PEP registers
- Negative news sources
Legacy systems generate many false positives (up to 95%). AI-enhanced matching reduces false positives by 60-70%.
InvestGlass integrates with leading screening providers, enabling alert disposition within one system and maintaining audit trails.
工作流程自动化和个案管理
Configurable workflows handle:
- 文件申请和收集
- 批准和升级
- 风险评分
- Periodic reviews and remediation
Rules engines route high-risk cases to compliance, request additional documents when needed, and block account opening until compliance is met.
InvestGlass offers workflow automation, task management, and case tracking connecting front office, compliance, and back office, and similar automation can streamline CDD-relevant processes in specialised CRM for therapists. Dashboards monitor process efficiency and risk distribution.
财富管理中的人工智能辅助 CDD
AI supports human judgment by:
- Classifying documents and extracting data with high accuracy
- Summarising adverse media
- Highlighting inconsistencies
- Detecting unusual portfolio changes
InvestGlass includes AI modules for portfolio management with human oversight and full audit trails.
Transition: Technology enables effective CDD, but strong policies and governance remain essential. The next section outlines building a robust CDD framework with InvestGlass.
利用 InvestGlass 设计稳健的 CDD 框架
A solid CDD framework combines policies, processes, technology, and people aligned with risk appetite and regulations. Frameworks should be reviewed annually or after regulatory changes.
确定风险偏好和 CDD 政策
Senior management must define acceptable risk levels, including:
- High-risk countries and sectors
- Complex products
Policies should specify when to apply simplified, standard, or enhanced CDD, and when to decline or exit relationships.
InvestGlass embeds these rules in workflows for automatic policy adherence.
程序和清单标准化
Detailed procedures and checklists ensure consistency across teams:
- Information request templates
- Risk assessment forms
- EDD documentation standards
Standardisation facilitates training, quality reviews, and regulatory demonstration. InvestGlass delivers these as digital forms and task lists, reducing reliance on paper.
培训、文化和管理
Regular staff training covers CDD obligations, red flags, and system use, with annual refreshers.
A culture encouraging escalation without fear is vital. Governance follows the three lines model:
线路 | 责任 |
|---|---|
第一（商务） | 执行 CDD，识别风险 |
第二（合规） | 监督、建议、监测 |
第三（内部审计） | 独立保证 |
InvestGlass reporting supports oversight across lines. |
数据质量、隐私和瑞士数据主权
Accurate, current data is crucial for CDD and compliance.
Data protection laws like EU GDPR and Swiss nFADP require:
- 目的限制
- 数据最小化
- Restrictions on cross-border transfers
Swiss data sovereignty is critical for institutions preferring to keep data within Switzerland, making a Swiss financial services CRM platform particularly relevant for banks, insurers, and public entities.
InvestGlass offers Swiss-hosted and on-premise deployments, enabling compliance with data location requirements.
降低 CDD 的成本和复杂性
Growing workloads and regulatory demands strain budgets; CDD can consume 5-10% of compliance costs.
Automation and process redesign reduce costs and improve quality.
Streamlining Onboarding and Reviews
Centralising data avoids duplication:
- Reusing verified data across products and reviews
- Automated reminders for document expiry
- Faster onboarding and fewer client interactions
InvestGlass consolidates CRM, onboarding, KYC, portfolio, and client portal functions, reducing fragmentation.
减少误报
Poorly tuned screening causes excessive false alerts.
Strategies include:
- 基于风险的阈值
- Fuzzy matching calibration
- Whitelisting known clients
- 客户细分
InvestGlass integrations and workflows triage alerts, enrich context, and route only relevant cases for review, improving data quality and reducing false positives.
Leveraging Analytics
Analytics inform process improvements and training:
- SLA adherence
- Missing data rates
- EDD escalation reasons
- Risk trends by segment and geography
InvestGlass dashboards provide visibility into CDD metrics and case details, enabling strategic use of CDD data.
结论：利用 InvestGlass 建立可持续、合规的 CDD
Customer due diligence is a continuous, risk-based process requiring strong policies, accurate data, and effective technology. Regulators expect documented policies, consistent execution, and oversight throughout the customer lifecycle.
Weak CDD exposes institutions to fines, reputational harm, and loss of banking relationships. Robust frameworks protect against financial crime and build stronger customer bonds.
InvestGlass offers a Swiss sovereign platform uniting CRM, digital onboarding, KYC/CDD, portfolio management, and marketing automation for banks, wealth managers, insurers, and regulated firms. With Swiss data sovereignty, configurable workflows, and integrated compliance, InvestGlass helps institutions meet obligations while lowering operational costs.
Ready to enhance your CDD operations? Assess your current processes against this guide and explore how automation, improved data management, and Swiss-hosted infrastructure can reduce risk and cost. Request a demo to see how InvestGlass can tailor workflows to your policies and regulatory needs, safeguarding your institution and clients.
关键术语和缩略语词汇表
- AML (Anti-Money Laundering): Laws and procedures to prevent disguising illicit funds as legitimate.
- CFT (Counter-Financing of Terrorism): Measures to stop terrorist financing via financial systems.
- KYC (Know Your Customer): Processes to verify identity and assess client risk.
- CDD (Customer Due Diligence): Identifying, verifying, and assessing customer risk.
- EDD (Enhanced Due Diligence): Additional scrutiny for high-risk customers.
- PEP (Politically Exposed Person): Individuals with prominent public roles, posing higher corruption risk.
- UBO (Ultimate Beneficial Owner): Natural persons owning or controlling legal entities.
- SAR (Suspicious Activity Report): Reports filed on suspicious activities.
- STR (Suspicious Transaction Report): Reports on suspicious transactions.
- FinCEN (Financial Crimes Enforcement Network): US AML/CFT regulatory agency.
- OFAC (Office of Foreign Assets Control): US Treasury sanctions enforcement office.
- SECO (State Secretariat for Economic Affairs): Swiss economic policy office managing sanctions.
- FATF (Financial Action Task Force): International AML/CFT standard-setting body.
- AMLA (Anti-Money Laundering Act): Swiss AML legislation.
- MROS（瑞士反洗钱报告办公室）：瑞士金融情报中心。.
- Three Lines Model: Governance framework dividing responsibilities among business, compliance, and audit.
