Blogs

Strategies for Third-party Due Diligence: Screening, and Risk Management

By AiPrise
1, Aug 2023
4 min read

Third-party due diligence


Effective third-party due diligence is an important and necessary process for any organization looking to build a successful business by outsourcing tasks and managing fluctuating operational needs. By having the right policies in place and implementing ongoing reviews, organizations can ensure that they are working with compliant vendors who are trustworthy entities. This is smart business, proper compliance, and a great way to protect your brand from potential risks while still achieving your objectives.


Screening requirements and techniques


Organizations must ensure that they have the proper screening requirements and techniques in place to vet third-party service providers and protect themselves from money laundering and other criminal activities. The Financial Action Task Force (FATF), a global intergovernmental body, outlines various regulations requiring third-party checks, particularly those in the financial services sector. For example, Anti-Money Laundering (AML) regulations require customer due diligence processes such as KYC (Know Your Customer) and corporate KYC for account openings.

Sanction screening is also an important part of the due diligence process. It involves looking up potential customers against a list of sanctioned individuals or entities to prevent them from engaging in activities that the government considers illegal or unethical. Additionally, organizations should conduct Politically Exposed Person (PEP) screenings to identify any connections between customers and individuals associated with government positions who might be more likely to engage in money laundering activities.


Customer profiling can also provide insight into customer risk management by helping organizations identify potential risks associated with different products or services offered by third-party service providers. Profiling allows for investigations into customers’ backgrounds, including their sources of funds and transaction history, which can help organizations better understand their customers’ behavior and assess whether they present any risks. Additionally, it can also help detect false positives when processing transactions through automated systems, allowing organizations to avoid costly penalties while still ensuring compliance with applicable laws and regulations.

Overall, effective due diligence policies are essential for businesses to properly vet third-party service providers and manage risk related to money laundering or other criminal activities. Through customer profiling and risk management strategies such as KYC verification, sanction screening, PEP screening, enhanced due diligence procedures, etc., organizations can ensure that they are working with trustworthy entities while avoiding costly penalties resulting from noncompliance with applicable laws and regulations.


KYC and Corporate KYC


Organizations seeking to protect themselves from criminal activities and costly penalties must comply with KYC laws and Corporate KYC processes. This typically includes verifying business registration information, gathering additional documents when necessary, and implementing enhanced due diligence procedures for high-risk customers or transactions. It is essential that organizations have comprehensive policies in place governing how they perform due diligence on their third parties and regularly review these policies for compliance. Additionally, ongoing reviews should be conducted throughout the relationship with any given vendor in order to ensure all necessary steps are taken. By following these regulations, organizations can effectively safeguard themselves against money laundering and other illegal activities while avoiding hefty penalties resulting from noncompliance.


Sanction Screening


Sanction screening is a critical risk management strategy when it comes to third-party due diligence. This process involves verifying identified parties against various lists of high-risk individuals and entities, including politically exposed persons (PEPs), as well as the Office of Foreign Assets Control (OFAC) list, United Nations (UN) sanctions list, Her Majesty's Treasury (HMT) list, European Union (EU) sanctions list, Australian Department of Foreign Affairs and Trade (DFAT) consolidated list, and other law enforcement lists from governing bodies worldwide. By performing sanction screening on any potential third-party vendors or partners, organizations can protect themselves from money laundering and other criminal activities while avoiding costly penalties resulting from noncompliance with applicable laws and regulations.

The Financial Action Task Force (FATF), an intergovernmental organization founded in 1989 to combat money laundering and terrorism financing, has issued several sets of guidelines that provide organizations with guidance on how they can properly perform sanction screening for third parties. For example, the FATF recommends that organizations regularly review their vendor’s source of funds by asking questions such as whether the vendor deals in cash or checks; what industries they are involved in; if they have any foreign relationships; or if there is anything suspicious about their operations to help identify any red flags. Additionally, FATF guidelines suggest that organizations should consider implementing additional controls to verify information provided by vendors concerning their sources of funds.


Organizations must also take into account factors such as customer profiling when carrying out sanction screening for third parties. Customer profiling involves looking at a customer’s financial activity over time in order to identify patterns or trends which may indicate fraudulent behavior or money laundering activities. To effectively carry out customer profiling, organizations need to collect data from multiple sources such as banks or other financial institutions, which can then be used for analysis purposes. Organizations should also implement measures such as enhanced due diligence for customers who pose higher risks than others, according to customer profiles.

By following these steps outlined by the FATF Guidelines and conducting thorough due diligence on their third parties through customer profiling and risk management techniques such as sanction screening, organizations can protect themselves from money laundering and other criminal activities while avoiding costly penalties resulting from noncompliance with applicable laws and regulations.


Enhanced Due Diligence


Enhanced Due Diligence (EDD) procedures are an important part of third-party due diligence, as they help organizations protect themselves from money laundering and other criminal activities. EDD involves collecting additional identifying information from a wider variety of sources, conducting additional searches to inform the individual customer risk assessment, commissioning intelligence reports on customers or beneficial owners, verifying the source of funds or wealth involved in the business relationship, and seeking additional information from the customer about the purpose and intended nature of the business relationship.

By gathering all this information for each customer or vendor, organizations can assess any risks associated with them. Additionally, it will ensure that their due diligence policies are properly implemented and monitored on an ongoing basis. This is especially important when dealing with high-risk customers such as Politically Exposed Persons (PEPs) or those with a higher risk of being involved in money laundering or other criminal activities.


It is also important for organizations to be aware of false positives when conducting EDD procedures. For example: if a customer has worked at a company which operates in an industry where money laundering could be possible but has since left that job role, then they may still appear on a list of sanctioned entities. In order to avoid this kind of situation, it’s essential to consider customer profiling and investigate further before making any decisions about a potential third-party service provider.

Enhanced Due Diligence procedures can be time-consuming and costly, but ultimately they help organizations protect themselves from money laundering and other criminal activities while avoiding costly penalties resulting from noncompliance with applicable laws and regulations. By taking these steps, companies can rest assured that they are working with compliant vendors who are trustworthy entities.


Talk to AiPrise


Schedule a demo with AiPrise to learn how you can structure your Onboarding Due Diligence.