Every examiner, auditor and board asks the same question about an enterprise-wide risk assessment: how did you get this rating? Too often the answer sits in a spreadsheet that nobody can trace, with scores that cannot be explained and controls that were never tested.
The EWRA Engine is a structured workbook that makes every rating explainable. Each result traces back to a risk factor and its weight, the institution's own data, a scored judgement with a written rationale, the controls that mitigate the risk, and the tolerance the board approved.
What the engine does:
• Scores money laundering, terrorist financing, proliferation financing and sanctions risk across 8 categories and 66 pre-built risk factors
• Combines quantitative data with assessor judgement, and requires a rationale for every factor
• Applies an override rule, so a single Very High factor lifts its whole category and the change is flagged
• Rates 31 controls on design and operating effectiveness, and caps controls whose testing is out of date
• Calculates residual risk from a residual matrix that you can edit
• Checks every category against the board's risk appetite and lists breaches first
• Builds an action plan from the gaps, with priorities and overdue flags
• Compares each category with the prior year: Increased, Decreased or Unchanged
• Produces a one-page board summary with sign-off for the analyst, the MLRO and the board
Six regulatory profiles are included: Global (FATF), United States, United Kingdom, European Union, Canada and Australia. Labels, report terms and references follow the profile you choose, while the scoring method stays the same. 34 regulatory references are listed on their own sheet, each reviewed and dated.
Every weight, threshold, band and the residual matrix sit on a single Settings sheet, so the methodology can be adapted to your institution without changing any formula. Three access roles (Analyst, MLRO and Admin) control who can edit what.
The engine suits MLROs, compliance officers, financial crime teams, internal auditors and AML consultants working with banks, fintechs, payment institutions, money service businesses, broker-dealers, wealth managers, insurers and crypto firms.
The bundle includes the full workbook (20 sheets, 5,946 formulas, with sample data you can clear), a DEMO workbook, a User Guide, an Access Keys document and the Terms of Use. It requires Microsoft Excel 2016 or later on Windows and contains no macros.
The EWRA Engine was built by a CAMS and CGSS certified compliance practitioner. It is a decision-support tool and does not provide legal or regulatory advice. Each institution remains responsible for its own risk assessment.
Got a question about the product? Email us at support@flevy.com or ask the author directly by using the "Ask the Author a Question" form. If you cannot view the preview above this document description, go here to view the large preview instead.
Source: Best Practices in Risk Management, Compliance Excel: Enterprise-Wide Risk Assessment Engine for Financial Crime Excel (XLSX) Spreadsheet, FinGuard Studio