Legislation in force to prevent financial crime has become more risk focused, requiring organizations to fully understand the risks their organization faces based on their business model and strategy.