A business-wide AML Risk Assessment & Policy (incl. policies, controls and procedures) is a legal requirement of regulated businesses.