The aircraft maintenance industry poses the highest sanctions risk due to its direct exposure to entities and activities frequently targeted by international sanctions. This sector involves high-value assets and dual-use goods (e.g., aircraft parts) that are subject to strict export controls. State-owned airlines from sanctioned jurisdictions, such as Iran and North Korea, are often explicitly designated on sanctions lists. Financial institutions providing acquiring services to an aircraft maintenance company face a significant risk of processing payments related to services or goods for a sanctioned entity, leading to severe regulatory penalties.

A. Pharmacy: While online pharmacies can pose risks if shipping to sanctioned countries, the overall inherent sanctions risk is significantly lower than that of the aviation sector.

C. Digital currency provider: This sector is high-risk for sanctions evasion due to anonymity. However, the aviation industry is directly and specifically targeted by numerous sanctions programs, making the risk more acute.

D. Retail company: This is generally considered a low-risk industry unless it is involved in exporting specific controlled goods or knowingly trading with sanctioned jurisdictions.

1. ACAMS CGSS Study Guide (English), First Edition. Chapter 4, "Sanctions Evasion and Detection," details high-risk industries and typologies. The transportation sector, particularly aviation and shipping, is highlighted due to its role in moving goods and its frequent involvement with state-owned enterprises from sanctioned countries and the potential for handling dual-use items.

2. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). (2019, July 23). Iran-Related Civil Aviation Industry Advisory. This advisory explicitly warns the civil aviation industry of the potential for sanctions exposure when providing services, including maintenance, to Iranian airlines. It details how designated Iranian airlines use the industry to transport illicit goods, creating direct sanctions risk for service providers (p. 1-3).

3. Financial Action Task Force (FATF). (2020). Guidance on Proliferation Financing Risk Assessment and Mitigation. This guidance identifies sectors vulnerable to proliferation financing, which is intrinsically linked to sanctions. The report notes that industries involved in dual-use goods, such as advanced components found in the aviation sector, are at high risk of being exploited to evade sanctions and export controls (p. 25, Section 65).

According to the U.S. Department of the Treasury's regulations governing sanctions programs, a financial institution must report any blocked property to the Office of Foreign Assets Control (OFAC) within 10 business days from the date the property was blocked. This requirement is stipulated in the Code of Federal Regulations (CFR). The report must provide comprehensive details about the blocked assets and the sanctioned party involved. This timely reporting is crucial for the effective administration and enforcement of U.S. sanctions programs, ensuring that OFAC has up-to-date information on assets frozen pursuant to its directives.

B. 11 business days: This is incorrect. The mandated reporting period is explicitly set at 10 business days, not 11.

C. 13 business days: This is incorrect. The regulation does not specify a 13-business-day timeframe for reporting blocked assets.

D. 14 business days: This is incorrect. While some regulatory reports have a 14-day or two-week timeline, the specific requirement for OFAC blocking reports is 10 business days.

1. U.S. Department of the Treasury. (2023). 31 C.F.R. § 501.603 - Reports on blocked and unblocked property. Code of Federal Regulations. Section: § 501.603(b)(1)(i) states, "Any U.S. person...holding property blocked pursuant to this chapter shall file a report on blocked property with OFAC within 10 business days of the property becoming blocked."

2. Association of Certified Anti-Money Laundering Specialists. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide. Chapter 4: Sanctions Evasion and Violations. The guide details the operational requirements for sanctions compliance, including the 10-business-day reporting rule for blocked assets to OFAC.

An effective sanctions compliance program (SCP) is built upon several fundamental pillars, as outlined by key regulatory bodies and industry standards. Senior management commitment is paramount, as it establishes the "tone at the top," ensures adequate resources, and promotes a culture of compliance. Testing and auditing are crucial for independently verifying that the program's controls are designed correctly and operating effectively, allowing for continuous improvement. Finally, a comprehensive training program is essential to ensure that all relevant employees understand their responsibilities, the sanctions risks pertinent to their roles, and the organization's policies and procedures for mitigating those risks. These three elements are universally recognized as core components of a robust SCP.

A. Politically exposed persons identification: This is a specific due diligence control, primarily associated with anti-corruption and AML efforts, rather than a foundational element of the entire sanctions program framework.

C. Loss prevention: This is a positive business outcome or goal of a successful compliance program (i.e., avoiding fines), not a structural component of the program itself.

D. De-centralized compliance functions: This describes a specific organizational structure, which is not a required element. Many regulators prefer a centralized function to ensure consistency and oversight.

1. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC). (2019). A Framework for OFAC Compliance Commitments. Page 1. This official guidance explicitly lists "Management Commitment," "Testing and Auditing," and "Training" as three of the five essential components of a sanctions compliance program.

2. ACAMS. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide. Chapter 4: Essential Components of a Sanctions Compliance Program. The guide details the core pillars of an effective SCP, which include senior management commitment, testing/auditing, and training, aligning directly with the correct answers.

3. Financial Action Task Force (FATF). (2021). Guidance on Proliferation Financing Risk Assessment and Mitigation. Paragraph 108. While focused on proliferation financing, this guidance reinforces the need for ongoing employee training and an independent audit function as key components of an effective compliance program to mitigate sanctions-related risks.

Generating productive alerts requires focusing screening systems on relevant, high-quality data to minimize false positives. The Wolfsberg Group guidance supports this by recommending two core practices. First, financial institutions should consider excluding certain low-risk parties (e.g., specific government entities, internal accounts) from screening to concentrate resources on higher-risk areas. Second, maintaining data hygiene is crucial. This involves regularly reviewing and removing data that is no longer relevant for risk assessment, such as a former address or a closed account, from the screening population. Both principles help ensure that the alerts generated are more meaningful and warrant investigation, thereby improving the overall effectiveness and efficiency of the sanctions screening program.

A. The guidance promotes automated, efficient, and comprehensive screening; relying on manual processes and narrowly limiting screening by jurisdiction runs counter to these principles.

C. A "good guy" list is specifically used to suppress known common false positives, not to avoid suppressing them, thereby increasing alert productivity.

D. Reducing the threshold settings from an optimal level would increase the volume of alerts, including false positives, which is the opposite of creating more productive alerts.

1. The Wolfsberg Group. (2019). Guidance on Sanctions Screening. Page 11, Section 4.3, "Data". This section explicitly supports both correct answers:

For option B: "FIs should consider what data is relevant for screening and what data may be excluded (e.g. internal or suspense accounts, or certain types of government entities)."

For option E: "FIs should also consider whether certain data should be removed from screening on an ongoing basis once it is no longer relevant (e.g. a former address)."

2. The Wolfsberg Group. (2019). Guidance on Sanctions Screening. Page 12, Section 4.4, "Tuning". This section refutes options C and D:

For option C: "FIs may also use suppression lists (sometimes referred to as “good guy” lists) to automatically discount alerts against names that have been previously investigated and discounted as false positives."

For option D: The section discusses the importance of setting an "appropriate threshold" to balance effectiveness and efficiency, implying that moving away from an optimal level would be detrimental.

Secondary sanctions are a tool used by the United States to extend the reach of its sanctions programs beyond its direct jurisdiction. They target non-U.S. persons (individuals, entities, or governments) for engaging in specific commercial or financial activities with a primary sanctioned target, even if the transaction itself has no direct connection to the United States. The purpose is to deter foreign actors from undermining U.S. foreign policy objectives by dealing with sanctioned countries or entities, effectively forcing them to choose between doing business with the sanctioned target or with the United States.

A. Sanctions which apply to more than one country: This describes multilateral or comprehensive sanctions, not the specific mechanism of targeting non-jurisdictional persons that defines secondary sanctions.

C. Sanctions which are transferred to a bank through its correspondent banking relationship: This describes a common enforcement vector for sanctions, but it is not the definition of secondary sanctions themselves.

D. When an entity has been sanctioned for the second time: This is an incorrect, literal interpretation of the word "secondary" and does not describe this specific type of sanctions measure.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition, Chapter 2: Sanctions Regimes and Their Key Components, Section: "Primary vs. Secondary Sanctions." The guide explains that secondary sanctions are "designed to apply to non-US persons who are outside of US jurisdiction" and are used to "prevent third parties from engaging in trade or other transactions with a sanctioned country."

2. U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), "Frequently Asked Questions." OFAC's guidance on various programs, such as those related to Iran or Russia, defines secondary sanctions as measures that can be imposed on foreign persons for engaging in certain conduct outside of U.S. jurisdiction. For example, FAQ 563 on Iran states that non-U.S. persons may be exposed to secondary sanctions for certain transactions with Iranian persons.

3. Congressional Research Service (CRS), "U.S. Sanctions: An Overview," Report R45415, (Updated October 22, 2021), page 2. The report defines secondary sanctions as those that "are intended to restrict the economic activity of non-U.S. persons, even when that activity occurs entirely outside U.S. jurisdiction... to dissuade non-U.S. persons from engaging in activities that are contrary to U.S. interests."

According to the Wolfsberg Group's risk-based approach, a financial institution's (FI) risk appetite is the most important factor in developing its sanctions compliance framework, including an in-house screening system. The risk appetite defines the level of sanctions risk the FI is willing to accept and sets the strategic direction for the entire program. It directly influences the design, scope, calibration (e.g., fuzzy logic thresholds), and governance of the screening system to ensure it is appropriately tailored to the FI's specific risk profile and tolerance levels. All other factors are components that are assessed and managed in alignment with this overarching strategic decision.

A. data quality: While critical for the operational effectiveness of a screening system, data quality is an input factor, not the primary strategic driver for its development.

B. geographical presence: This is a key input into the sanctions risk assessment, but the overall risk appetite determines how the risks associated with geography are managed.

D. information technology capabilities: These are practical enablers or constraints for building the system, but they do not define the system's fundamental design, purpose, or stringency.

1. The Wolfsberg Group, "Guidance on Sanctions Screening," 2019.

Section 2, "Governance and Oversight," Page 5: "The Board and Senior Management are responsible for setting the FI’s risk appetite for sanctions... The sanctions screening framework should be designed and implemented in a manner that is consistent with the FI’s established sanctions risk appetite." This establishes risk appetite as the foundational element guiding the framework's design.

Section 3, "Risk Assessment," Page 6: "An FI should take a risk-based approach (RBA) to designing and implementing its sanctions screening framework... The RBA should be proportionate to the FI’s specific inherent sanctions risks and in line with its risk appetite."

2. ACAMS, "Certified Global Sanctions Specialist (CGSS) Study Guide," 2nd Edition.

Chapter 2, "The Components of a Sanctions Compliance Program": The guide consistently emphasizes that the foundation of any effective sanctions compliance program is a thorough risk assessment and a clearly defined risk appetite approved by senior management. The design of all controls, including screening systems, flows from this initial determination.

Upon freezing the assets of a newly designated individual or entity, a financial institution's primary and immediate obligation is to report the action to the relevant national competent authority (NCA). This reporting is a critical component of the sanctions enforcement framework, as it informs the government about the assets that have been successfully blocked in accordance with the law. This allows authorities to monitor compliance and take further action if necessary. Failing to report a freeze is a serious compliance violation.

A. Notify the customer about the freezing.

This action could be considered "tipping off," potentially hampering wider investigations. The primary legal duty is to report to the authorities, not the sanctioned party.

B. Freeze accounts of the customer's family members that have accounts within the same financial institution.

Sanctions are targeted at listed individuals and entities they own or control. Freezing assets of non-designated family members without a legal basis is an overreach and not a standard requirement.

D. Transfer the funds to another financial institution where the customer has another account.

This is a direct violation of the sanctions. An asset freeze explicitly prohibits any movement, transfer, or dealing with the funds of the sanctioned person.

1. Council of the European Union. (2018). EU Best Practices for the effective implementation of restrictive measures. Document 8519/18.

Page 20, Section V, Paragraph 69: "Operators should, without delay, inform the competent authority of the Member State where they are resident or located of any assets frozen in implementation of the restrictive measures in force and of any authorisation granted, in accordance with the relevant provisions of the legal acts." This directly supports the requirement to inform authorities.

2. Council Regulation (EU) No 269/2014 of 17 March 2014. Concerning restrictive measures in respect of actions undermining or threatening the territorial integrity, sovereignty and independence of Ukraine.

Article 9, Paragraph 2: "Natural or legal persons, entities or bodies shall immediately supply any information which would facilitate compliance with this Regulation, such as information on accounts and amounts frozen in accordance with Article 2, to the competent authorities of the Member States where they are resident or located..." This article establishes the legal obligation to supply information about frozen assets to competent authorities.

3. ACAMS. (2023). Certified Global Sanctions Specialist (CGSS) Study Guide.

Chapter 4: Sanctions Evasion and Investigations: The guide details the process following a confirmed sanctions match, which includes blocking/freezing the transaction or account and then promptly filing a report with the relevant regulatory body (e.g., OFAC in the US, or the respective NCA in the EU). This confirms that reporting is a mandatory step after freezing.

A customer's reluctance to provide information on the end-use or end-user of an item is a significant red flag in sanctions compliance. This behavior suggests the customer may be attempting to conceal the true purpose or ultimate destination of the goods, potentially to divert them to a sanctioned entity, jurisdiction, or for a prohibited purpose, such as weapons proliferation. Verifying the end-use is a critical component of due diligence, especially when dealing with dual-use goods that have both civilian and military applications. Evasiveness on this point directly undermines the ability to assess the legitimacy and compliance of the transaction.

A. The payment is received after the goods are shipped.

This is a common commercial practice known as "open account" trading and is not, by itself, an indicator of sanctions evasion.

B. The product is compatible with the technical level of the country.

This indicates a legitimate transaction. A red flag would be the opposite: shipping highly technical goods to a country lacking the infrastructure to use them.

D. There is an unwillingness to offer information on the goods’ expiration date.

This is primarily a commercial or logistical concern rather than a direct sanctions red flag, unless combined with other suspicious indicators.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, Chapter 4: Sanctions Evasion and Countermeasures. The guide lists customer-related red flags, including "The customer is evasive or reluctant to provide information about the end-user or end-use of the goods." This is identified as a key indicator of potential diversion or illicit activity.

2. U.S. Department of Commerce, Bureau of Industry and Security (BIS), "Know Your Customer Guidance." This official guidance provides a list of "Red Flag Indicators" for export controls and sanctions. It explicitly states, "The customer is reluctant to offer information on the end-use of the item" as a red flag that requires further inquiry.

3. The Wolfsberg Group, "The Wolfsberg Group, ICC and BAFT Trade Finance Principles," 2019 Update, Page 11, Section 3.2. The principles emphasize the need for financial institutions to understand the underlying transaction, including the goods involved. A customer's refusal to provide details about the goods' use would prevent this level of due diligence and be considered a significant risk indicator.

Sanctions evasion schemes exploit complex international financial systems. Trade finance is a high-risk channel due to its reliance on documentation (e.g., bills of lading, invoices) that can be falsified to hide the involvement of sanctioned parties, goods, or jurisdictions. Correspondent banking relationships are critical for accessing the global financial system and can be abused to process payments for sanctioned entities, often through nested accounts in jurisdictions with weaker controls. Shell companies are fundamental tools used to create opaque corporate structures, obscuring beneficial ownership and the true origin or destination of funds, thereby facilitating illicit transactions through various banking channels.

A. Corporate banking: This is a broad category of services, not a specific evasion channel. Evasion occurs through specific products within this category.

C. Online banking: This is a service delivery method, not a primary channel for the complex, large-scale schemes typical of sanctions evasion.

D. Retail banking: While possible for smaller-scale evasion, it is not a common channel for major, sophisticated sanctions circumvention schemes.

---

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 2nd Edition. Chapter 3, "Sanctions Evasion Techniques," details the use of shell companies, trade finance manipulation, and the exploitation of correspondent banking as primary methods for sanctions circumvention.

2. Financial Action Task Force (FATF). (2020). Guidance on Proliferation Financing Risk Assessment and Mitigation. This guidance identifies shell companies and complex corporate structures as key vulnerabilities (p. 21) and highlights the abuse of international trade and correspondent banking as channels for evading sanctions (pp. 24-26).

3. The Wolfsberg Group. (2022). Statement on Effectiveness. The statement emphasizes the importance of controls over high-risk areas, including correspondent banking and trade finance, which are recognized as significant channels for illicit financial activities like sanctions evasion.

4. U.S. Department of the Treasury. (2024). 2024 National Risk Assessments on Money Laundering, Terrorist Financing, and Proliferation Financing. The report identifies the misuse of legal entities like shell companies (p. 29) and the exploitation of correspondent banking services (p. 21) as primary vulnerabilities for illicit finance, including sanctions evasion.

Transliteration is the systematic process of converting text from one writing system (script) into another. It involves mapping the characters of a source script to functionally equivalent characters in a target script based on spelling. In the context of sanctions compliance, this is essential for screening names that originate in non-Latin alphabets (e.g., Arabic, Cyrillic, Mandarin) against sanctions lists, which are often in Latin script. This process helps account for variations in spelling that arise when a single name is converted into another script using different standards, thereby improving the accuracy of the screening process.

A. This describes naming conventions or aliases, which are different ways a name is used, not how it is written in different scripts.

B. This defines Romanization, which is a specific type of transliteration (to Latin script), but not the complete, general definition.

C. This describes the overall process of sanctions list screening, not the specific linguistic technique of transliteration used within it.

1. ACAMS Certified Global Sanctions Specialist (CGSS) Study Guide, 6th Edition. Chapter 3, "Screening for Sanctions, PEPs, and Adverse Media," Section: "Data and Matching Challenges," pp. 3-24 - 3-25. The guide defines transliteration as "the conversion of text from one script to another" and distinguishes it from translation and transcription.

2. Knight, K., & Graehl, J. (1998). Machine Transliteration. Computational Linguistics, 24(4), 599–612. Section 1, "Introduction," defines transliteration as the process of converting a word from one alphabetic script to another, focusing on the phonetic and orthographic mapping between writing systems. (Available via MIT Press and ACM Digital Library).