How an international bank with a strong US presence narrowly avoided defaulting on a critical compliance requirement

Client’s challenge


Under the terms of a Memorandum of Understanding (MOU) negotiated with US banking regulators, an international bank with a strong regional US presence was given just 18 months to comply with a specific set of provisions. In addition to identifying private banking customers meeting high-risk criteria, management was required to perform a review of all of the transactions conducted by those customers over a one-to-two year period in order to determine whether any suspicious activity had been overlooked by the bank's existing monitoring functions.

Eight weeks before the deadline, however, a review conducted by a PwC internal audit team raised a few red flags. The bank had not properly defined risk-based standards to conduct the review, undermining its effectiveness. In addition, there was confusion among the bank's business units about how to proceed. With little time to complete the review, the management asked PwC for assistance.

The first task was helping the bank establish and document risk-based standards that could be used to identify the customer population to be reviewed. Among other steps, PwC obtained and analyzed transaction data to verify that customers in high-risk categories were included in the population to be reviewed and developed a workflow tool to improve quality and efficiency. When it became apparent that the bank’s relationship managers were not completing the required Know-Your-Customer reports in a timely manner, PwC also designed and implemented a pilot training program to enable bank personnel to meet these requirements more effectively—by the regulator's deadline, as well as on an ongoing basis.

Since the initial customer review process had been highly manual, the bank needed to revise its approach and define a strategy that would enable them to complete the tasks required by the regulators within the established timeframe. Drawing on a broad range of PwC resources in governance, risk management, compliance, and data management, PwC helped the bank develop and obtain approval from regulators for a streamlined initiative.

By automating analysis of high-risk transaction activity, the team was able to significantly decrease the size of the population requiring review.

Moreover, with PwC's assistance, management was able to secure the regulators’ approval to reduce the review period from one to two years to just 15 months. The introduction of automation also enhanced the effectiveness and accuracy of the bank’s targeting process for identifying high-risk customers, improved the quality of documentation, and increased control over file and customer tracking.

Throughout this process, PwC played a crucial role in assisting management in the establishment of quality control procedures under significant deadline pressure.

As a result of this revised approach, the bank met its MOU obligations on time and provided regulators with high quality results. Central to this outcome was the bank’s success in reducing the need to evaluate insignificant transactions and eliminating the need to conduct a comprehensive review of large volumes of bank statements.

At the same time, automation enabled the bank to isolate high-risk transactions that would not have surfaced through a manual process—such as crossaccount activities and multiple transactions across several statement periods. PwC also helped the bank improve the ability of its personnel to address regulatory requirements in the future, supported by automation and an enhanced set of processes and controls.


Contacts
Dennis Bartolucci
US internal audit services leader

© 2008 PricewaterhouseCoopers. All rights reserved. PricewaterhouseCoopers refers to the network of member firms of PricewaterhouseCoopers International Limited, each of which is a separate and independent legal entity.
Accessibility information Skip navigation Countries online