Planning the AML/CTF program involves an understanding of both compliance and risk management. Compliance is about meeting obligations which in this case are mandated by the AML/CTF Act.
Risk management involves:
a. the identification of different types of risk
b. assessing the impact of these risks
c. determining the risk appetite of the organisation
d. putting in place risk management procedures and controls
e. all of the above