01
Governance & compliance function
We support the assigned compliance role with the authority, competence and reporting structure needed to help senior management discharge its FICA responsibilities.
FICA · AML / CFT / CPF implementation
FICA Implementation
Build a practical, risk-based AML framework that turns FICA obligations into everyday business practice.
As an Accountable Institution, an FSP needs more than a policy document. RCC helps embed governance, due diligence, sanctions screening, reporting, training and record-keeping into daily operations.
- Accountable institution support
- Board & management guidance
- Risk-based implementation
- FICA-ready processes
Overview
What the service covers
FICA implementation turns statutory AML/CFT/CPF requirements into practical controls, documented responsibilities and evidence that can be applied consistently.
We work with the compliance function, Board and operational teams to design a framework that fits the FSP's products, clients, channels and risk profile—and remains usable after implementation.
Core implementation areas
- Governance and compliance function support
- RMCP development and periodic review
- CDD, UBO and client risk classification
- Sanctions screening and escalation controls
- goAML registration and regulatory reporting
- Employee training and awareness
- Record-keeping and file audits
Implementation capabilities
What FICA implementation entails
02
RMCP development & maintenance
We assess enterprise-wide risk, draft a tailored RMCP, support approval and keep the programme current, accessible and ready for regulatory review.
03
CDD & beneficial ownership
We design onboarding, verification and risk-classification workflows for individuals, legal persons and trusts, including UBO, prominent-person, EDD and SDD controls.
04
Sanctions & TFS screening
We establish client and beneficial-owner screening, escalation, transaction restriction and notification procedures for targeted financial sanctions.
05
goAML & regulatory reporting
We support FIC registration, reporting-user administration and clear internal escalation for cash, suspicious activity and terrorist-property reporting.
06
Training & awareness
We deliver practical AML/CFT/CPF training so staff understand the RMCP, recognise red flags, escalate concerns and leave a complete training record.
07
Record-keeping & compliance audits
We test onboarding files and storage controls, verify secure five-year retention and assess whether evidence is complete, accessible and inspection-ready.
Our process
How implementation works
A structured, collaborative rollout that is designed for your business, embedded with your team and refined through testing.
- 01
Assess
Understand your business, obligations, risks and current controls.
- 02
Design
Develop a tailored risk framework, RMCP and procedures.
- 03
Configure
Build workflows, controls, records and reporting routes.
- 04
Train
Equip your team with practical guidance and red-flag awareness.
- 05
Review
Test effectiveness, review files and refine the framework.
Practical outputs
Deliverables you can expect
Enterprise risk assessment
Documented risk assessment and risk ratings.
RMCP document
Tailored policies, procedures and control library.
CDD / UBO workflow pack
Client-onboarding flows, checklists and verification guides.
Reporting escalation framework
Reporting matrix, escalation paths and approval controls.
Training records & materials
Materials, attendance records and comprehension evidence.
File review & readiness checklist
File-audit outputs and a practical readiness assessment.
Why clients choose RCC
Practical implementation
Controls designed for your operating model, risks and available resources.
Regulator-aware guidance
Deep regulatory knowledge translated into real-world operating decisions.
Tailored to your business model
A proportionate framework shaped around your clients, products and channels.
Clear, workable documentation
Concise, actionable evidence that is easier to use, maintain and audit.
Put the right FICA framework in place.
Let’s help you implement a practical AML and reporting structure that stands up to scrutiny.