All employees must ensure the identification of risks in the activities, products and processes in their sphere of responsibility, assessment thereof and implementation of sufficient control mechanisms to identify any deficiencies and errors in the activities of the employees, job descriptions, procedures or processes. In order to ensure compliance with this principle, the Company has divided the risk management tasks according to the international method of three lines of defence.
1st line of defence
The tasks of the first line of defence are fulfilled by a fully automated IT solution. The task of the program is to determine, on the basis of the entered data, the customers’ risk profile and their degree of risk, the appropriate due diligence measures and the monitoring frequency. The work of the program is monitored by the FIU Compliance Officer and internal audit.
2nd line of defence
The tasks of the second line of defence are fulfilled by the FIU Compliance Officer who ensures training of the employees, implementation of the international sanctions, gathering of information about unusual transactions, transactions suspected of money laundering and/or of the nature referring to terrorist financing, analysing of the respective information and communication thereof, as appropriate, to the Financial Intelligence Unit, and observance of any precepts issued by the latter.
The FIU Compliance Officer inspects annually the work of the 1st line of defence, i.e. the customer managers and automated IT solutions, upon compliance with the requirements in the area of preventing money laundering and terrorist financing, records the results of the inspection and, if any deficiencies or violations are detected, requires their elimination and informs a member of the Management Board about the deficiencies and/or violations.
After every 6 months FIU Compliance Officer presents overview about AML&CTF activities and statistics to the Management Board.
3rd line of defence
The tasks of the third line of defence are fulfilled by a member of the Management board who also performs the function of internal audit. A member of the Management Board is responsible for the existence of updated internal rules in line with the activity profile required for meeting the requirements under the legislation and for their compliance and updating and coordinates the work of the FIU Compliance Officer and, if necessary, updates the IT solutions, customer profile parameters and risk appetite. A member of the Management Board also conducts internal audit of the Company’s internal procedures/processes in order to assess efficiency of the current money laundering and terrorist financing prevention measures and their compliance with the established requirements.