Decision Matrices
Purpose#
Decision matrices provide consistent decision support. They do not replace MLRO or legal decisions.
Master escalation matrix#
| Trigger |
Severity |
Default required action |
Output |
| Missing non-material CDD document |
Low |
Request document |
Missing info list |
| Minor identity mismatch |
Low/Medium |
Verify and record rationale |
CDD note |
| Complex ownership |
High |
UBO deep dive / EDD |
UBO memo |
| PEP match |
Medium/High |
PEP classification / EDD |
PEP memo |
| Serious adverse media |
High |
EDD / MLRO review |
Adverse media memo |
| Sanctions possible match |
High/Critical |
Escalate; no approval |
Sanctions hit memo |
| Sanctions true match |
Critical |
MLRO/legal sanctions process |
Sanctions memo + decision log |
| Suspicion of ML/TF/PF |
Critical |
MLRO escalation |
Internal suspicion memo |
| Tipping-off risk |
Critical |
Stop uncontrolled customer contact |
Tipping-off control note |
| FATF high-risk geography |
High/Critical |
EDD / countermeasure review |
Geographic exposure risk note |
| VASP unlicensed/opaque |
High |
EDD / senior review |
Crypto AML memo |
| TBML/PF indicators |
High/Critical |
EDD / MLRO escalation |
TBML memo |
CDD route matrix#
| Customer risk |
Product risk |
Geographic exposure risk |
Screening result |
Route |
| Low |
Low |
Low |
Clear |
Normal CDD / possible SDD if permitted |
| Medium |
Low/Medium |
Low/Medium |
Clear |
Normal CDD with targeted checks |
| High |
Any |
Any |
Clear |
EDD |
| Any |
Any |
High |
Clear |
EDD / additional controls under policy overlay |
| Any |
Any |
Any |
PEP |
PEP review / EDD as required |
| Any |
Any |
Any |
Sanctions possible/true |
Sanctions workflow |
| Any |
Any |
Any |
Serious adverse media |
EDD / MLRO review |
Screening result matrix#
| Result |
Meaning |
Action |
| No hit |
No relevant match found |
Record search terms and date |
| False positive |
Match ruled out by identifiers |
Record rationale |
| Possible match |
Cannot rule out |
Escalate/senior review |
| Likely match |
Strong overlap |
MLRO/legal escalation |
| True match |
Confirmed match |
Critical process under sanctions/reporting rules |
Residual risk matrix#
| Residual risk |
Suggested decision support |
| Low |
Proceed; standard monitoring |
| Medium |
Proceed with conditions or targeted monitoring |
| High |
Senior approval, EDD, shorter review cycle |
| Critical |
Decline/exit/freeze/report consideration; MLRO decision required |
Confidence matrix#
| Confidence |
Evidence condition |
Review language |
| High |
Multiple reliable sources confirm |
“The evidence supports…” |
| Medium |
One reliable source or partial corroboration |
“Available evidence indicates…” |
| Low |
Weak or incomplete evidence |
“The issue remains unresolved…” |
| Unknown |
No reliable evidence |
“Unable to conclude; additional evidence required…” |
Digital Jurisdiction Exposure decision matrix#
| Signal |
Risk meaning |
Action |
| Normal CDN/global cloud provider |
Usually neutral |
Record only if relevant |
| DNS/email provider in different low-risk geography |
Potential outsourcing |
Note if inconsistent with profile |
| Higher-risk country-code domain in MX/SPF/NS/CNAME/SOA/PTR |
Supporting risk indicator |
Include in EDD note or ask clarification |
| Restricted/sanctions-sensitive infrastructure reference |
Enhanced-risk indicator |
Senior analyst review and sanctions screening context |
| Digital exposure plus adverse media, opaque UBO or funds mismatch |
Combined risk |
Consider MLRO escalation |