A risk-based compliance program is one that identifies and prioritizes the highest compliance risks to the FI and implements controls, policies and procedures to mitigate them. A data-based option is the most suitable for a risk-based compliance program, as it allows the FI to collect, analyze and monitor relevant data on its customers, transactions, products, services, geographies and other risk factors. A data-based option also enables the FI to measure the effectiveness of its compliance program and adjust it as needed to respond to changing risks and regulatory expectations12.
References:
* 1: Risk-Based Approach to Compliance Management2
* 2: A Risk-Based Approach to Regulatory Compliance1
Reference:
https://www.ifc.org/wps/wcm/connect/e7e10e94-3cd8-4f4c-b6f8-1e14ea9eff80/45464_IFC_AML_Report.pdf?M

Money laundering and terrorist financing are both forms of financial crime that involve the movement of illicit funds. However, they differ in the source and purpose of the funds. Money laundering is the process of disguising the origin, ownership, or destination of funds that are derived from illegal activities, such as drug trafficking, fraud, or tax evasion. Terrorist financing is the provision or collection of funds, by legitimate or illegitimate means, for the purpose of carrying out terrorist acts. Therefore, the anti-money laundering specialist should consider the following factors in developing a compliance program:
Related practices are used to conceal the nature of the funds. Both money launderers and terrorist financiers use similar methods to hide the true identity, source, or destination of the funds, such as using shell companies, front organizations, complex transactions, cash couriers, or cryptoassets. A compliance program should include measures to identify and verify the customers, beneficial owners, and counterparties involved in the transactions, as well as to monitor and report any suspicious or unusual activities.
Similar techniques are used to move funds. Both money launderers and terrorist financiers use the same stages of placement, layering, and integration to move funds through the financial system. Placement is the introduction of illicit funds into the legitimate financial system, such as by depositing cash, purchasing assets, or transferring funds electronically. Layering is the separation of the funds from their source, such as by using multiple accounts, jurisdictions, or intermediaries. Integration is the re-entry of the funds into the legitimate economy, such as by investing in businesses, real estate, or securities. A compliance program should include measures to detect and prevent the movement of illicit funds through the financial system, such as by applying risk-based due diligence, record-keeping, and transaction limits.
References:
CAMS Certification Package - 6th Edition | ACAMS
CAMS Certifications: How to Get CAMS Certified | ACAMS
ACAMS CAMS Certification Video Training Course - Exam-Labs
Exam CAMS: Certified Anti-Money Laundering Specialist (the 6th edition)