Financial crime audit: beyond policy compliance to genuine control assurance
The FCA expects internal audit to test whether financial crime controls actually work, not just whether they exist. What that means in practice for AML, transaction monitoring, SAR quality and high-risk customer oversight.