By Jonas Osman AbdelfourPublished August 25, 2025
Summary Board-level AML MI often defaults to operational statistics — alerts generated, cases closed, SARs filed. These metrics describe activity, not risk. Effective MI reframes the view around inherent risk, control effectiveness and residual risk relative to appetite.
Core components A concise pack covers four areas: exposure (inherent risk by segment), control health (monitoring, screening, KYC quality), issues and remediation, and regulatory interactions.
Forward indicators Volumes of high-risk onboardings, exit backlog, model tuning changes and control testing pass rates are earlier signals than SAR volumes.
Benchmarking cautions Peer benchmarking of SAR volumes or alert rates is of limited value because underlying customer bases and typology mix differ. Internal trend analysis is more informative.
Escalation The pack should include the small number of matters where the board is being asked to note, discuss or decide, rather than the full operating record.
Limitations MI reflects framework maturity. Firms in remediation should show programme progress alongside steady-state metrics rather than substitute one for the other.
Related expertise See [AML and Financial Crime](/expertise/aml) and [Board oversight of financial crime risk](/insights/board-oversight-of-financial-crime).
Frequently asked questions
What should risk leaders know about core components?
A concise pack covers four areas: exposure (inherent risk by segment), control health (monitoring, screening, KYC quality), issues and remediation, and regulatory interactions.
What should risk leaders know about forward indicators?
Volumes of high-risk onboardings, exit backlog, model tuning changes and control testing pass rates are earlier signals than SAR volumes.
What should risk leaders know about benchmarking cautions?
Peer benchmarking of SAR volumes or alert rates is of limited value because underlying customer bases and typology mix differ. Internal trend analysis is more informative.
What should risk leaders know about escalation?
The pack should include the small number of matters where the board is being asked to note, discuss or decide, rather than the full operating record.