Governance and the Role of the Financial Crime Investigator
Governance and the Role of the Financial Crime Investigator
This domain tests how the investigation function sits inside the institution: the three lines of defence, independence, escalation and oversight. Questions frequently present a pressure scenario - a relationship manager wants an account kept open - and ask what the investigator does and to whom they report.
Core rules
- The first line owns the customer and the risk. The second line provides independent challenge and investigation. The third line, internal audit, tests whether the first two work. Investigators sit in the second line and must not own the relationship they investigate.
- Independence means no reporting line to revenue. Escalation runs to the MLRO or BSA officer and, where required, to the board or audit committee.
- An investigation charter or policy should set out the mandate, the authority to obtain records, confidentiality obligations, escalation thresholds and retention periods.
- Senior management owns the risk appetite and must resource the function adequately. Regulators expect a documented risk-based approach backed by sufficient staff, training and systems.
- Quality assurance is a control, not a courtesy: independent review of closures, sampling of open cases, and documented rationale.
- Escalation is an obligation, not a discretionary judgement call. Defined triggers - high-risk customer, PEP, sanctions nexus, senior employee involvement, law enforcement contact - route to the MLRO.
Worked example
An investigator finds that a PEP customer received $500,000 from a state-owned entity. The relationship manager argues the customer is high profile but clean, and asks for a delay while the relationship is renewed. The investigator does not negotiate. Independence means the finding goes to the MLRO with the evidence attached, the relationship manager's view is recorded in the file, and the decision on restriction or exit is taken by the MLRO with written reasoning. Commercial concern is context, not an investigative input.
Traps that cost marks
- Accepting a verbal instruction to close a case and never documenting who gave it.
- Reporting to a business head who personally owns the customer relationship.
- Treating quality assurance as optional extra work rather than a governance requirement.
- Assuming a strong policy is sufficient - regulators and auditors test effectiveness, not documents.