Risk Assessments

Overview

Risk assessments let you evaluate each client across five risk dimensions and produce a composite risk level of Low, Medium, or High. Each assessment tracks its own KYC checklist, client questionnaires, and AML profiles. Only users with the Admin or Manager role can create, edit, complete, or delete assessments.

The Risk Assessment List

Navigate to Risk Assessment from the sidebar. The table displays all assessments with the following columns:

• Client — the client name
• Risk Level — the composite risk badge (Low, Medium, or High)
• Status — Not Started, In Progress, Completed, or Overdue
• Assessed By — the staff member who completed the assessment
• Next Review — when the assessment is due for review

Overdue assessments and high-risk clients are highlighted with a coloured left border. Completed assessments appear with muted text.

Searching and Filtering

1. 1

   Type into the Search assessments... field to filter by client name.

2. 2

   Select the Status filter to show only assessments in a particular status.

3. 3

   Use the date range picker in the toolbar to narrow results by creation date.

Creating a Risk Assessment

1. 1

   Select New Assessment in the page header, or press N.

2. 2

   On the create page, choose the client from the Client dropdown. This is the only required field.

3. 3

   Select Create Assessment or press ⌘+↵ to submit. You are taken to the assessment detail page.

Scoring Risk Factors

The Risk Scoring tab is the default view on the detail page. Score each of the five risk dimensions:

• Client Type — PEPs, high net worth individuals, complex ownership structures, cash-based businesses
• Geography — high-risk jurisdictions, corruption or terrorism links
• Service Provided — company formation (higher risk) vs. annual accounts (lower risk)
• Transactions — client money accounts, unusual fund transfers
• Delivery Channel — face-to-face (lower risk) vs. never met (higher risk)

For each factor, select a level of Low, Medium, or High and optionally add notes. The Overall Risk card at the top shows the composite result, calculated as the highest individual factor.

Overriding the Computed Risk

Toggle the Override computed risk switch to set a manual risk level. When overriding, you must select a risk level and provide a written justification. Select Save Risk Scoring to persist your changes.

Next Review Date

The next review date is set automatically based on the overall risk level:

• High — 12 months
• Medium — 24 months
• Low — 36 months

You can adjust the date manually using the Next Review Date picker.

Completing an Assessment

1. 1

   Select Complete Assessment in the page header. This button is enabled once an overall risk level has been set.

2. 2

   A dialog shows a checklist of completion criteria:

   • All risk factors scored (e.g. 5/5 scored)
   • Overall risk level set
   • All questionnaires reviewed
   • All KYC checks completed

   Items that pass show a green tick. Incomplete items show an amber warning. You can still complete the assessment with incomplete items, but it is recommended to address them first.

3. 3

   Select Complete Assessment to confirm. Risk scores and KYC checks are locked after completion.

Bulk Actions

Select rows using the checkboxes, then use the toolbar actions:

• Change Status — set the selected assessments to any status (Not Started, In Progress, Completed, or Overdue)
• Export CSV — download the selected assessments as a CSV file with columns for client name, status, risk level, assessed date, next review date, and assessor
• Delete — remove the selected assessments (hold ⇧+CLICK to skip the confirmation dialog)

Deleting an Assessment

From the detail page, open the actions menu (three dots icon) and select Delete. Confirm in the dialog by selecting Delete Assessment. All CDD checks, questionnaires, and evidence are permanently removed.

What's Next?

• CDD Checks — complete the KYC checklist and upload evidence for each check
• Client Questionnaires — send and review AML questionnaires
• Privacy and Data — export client data for GDPR compliance