CAMS-RM study guide
CAMS-RM · Work through your exam, one topic at a time.
The Certified Anti-Money Laundering Specialist – Risk Management (CAMS-RM) is a professional credential for AML/CFT practitioners who move beyond transaction-level compliance into programme design, risk appetite setting, and control assurance. It suits compliance officers, risk managers, internal auditors, consultants, and regulators who already understand customer due diligence and suspicious activity reporting and now need to defend risk-based decisions to boards, examiners, and business lines. The CAMS-RM study guide has 9 sections and about 4,127 words.
01AML/CFT Risk Management Fundamentals and Governance
Domain 1 tests whether you can explain how an AML/CFT programme is owned, structured and governed: not only what the rules require, but who is accountable, how decisions escalate, and how the institution proves the programme actually works. The board (or equivalent governing body) approves the AML/CFT policy and risk appetite, appoints a designated compliance officer with sufficient authority, resources and board access, and receives regular reporting on risk and control effectiveness.
457 words, about 2 min02Risk Identification, Assessment and Risk Appetite
Domain 2 tests whether you can build and defend a risk assessment: how inherent risk is identified across customers, products, channels and geographies, how controls convert it into residual risk, and how residual risk is measured against a board-approved appetite. Inherent risk is exposure before controls; residual risk is what remains once controls operate.
421 words, about 2 min03Customer Due Diligence
Domain 3 tests the mechanics of CDD: when it must be performed, what the four core elements are, how identification differs from verification, and what to do when CDD cannot be completed. Identify the customer and verify identity using reliable, independent sources.
428 words, about 2 min04Beneficial Ownership and Enhanced Due Diligence
Domain 4 tests whether you can find the real human behind a structure and escalate appropriately: ownership and control thresholds, layered corporate chains, trusts and nominee arrangements, and the enhanced measures triggered by higher risk. A beneficial owner is a natural person who ultimately owns or controls the customer, typically through an ownership threshold such as 10% or 25% depending on jurisdiction and risk, or through control by other means: shareholder agreements, nominee arrangements, trusts, partnerships, or the ability to direct the entity.
420 words, about 2 min05Transaction Monitoring, Screening and Detection Scenarios
Domain 5 tests whether you can distinguish monitoring from screening, design and tune detection scenarios, and disposition alerts defensibly using typologies rather than intuition. Screening compares customers and payments against lists, at onboarding, on list updates, and on payment processing.
396 words, about 2 min06Sanctions, PEPs and Proliferation Financing Risk
Domain 6 tests targeted financial sanctions, politically exposed person handling, and proliferation financing: the regimes, ownership rules, screening obligations, and the red flags specific to dual-use goods and trade. Targeted financial sanctions require asset freezing without prior notice and a prohibition on making funds or economic resources available to designated persons.
388 words, about 2 min07Reporting, Investigation and Escalation
Domain 7 tests the path from alert to report: how cases are investigated, when suspicion crystallises, what a good STR narrative contains, and how escalation, tipping-off and continuing activity are handled. An alert becomes a case when it cannot be dispositioned at triage.
431 words, about 2 min08Risk Mitigation, Controls and Testing
Domain 8 tests whether you can identify controls, judge their design and operating effectiveness, and prove remediation: the mechanics of testing, sampling, root cause analysis, and issue management. Preventive controls stop an event: CDD before onboarding, sanctions screening before payment release, dual authorisation.
367 words, about 2 min09Data, Technology and Model Risk in AML
Domain 9 tests the systems backbone of AML: data quality, model lifecycle and governance, tuning, list hygiene, and the risks introduced by automation and machine learning. AML outcomes depend on complete, accurate, timely and consistent data.
819 words, about 4 min