Tranche 2, plainly · The officer's desk
You've just been named your firm's AML/CTF compliance officer. Maybe you volunteered. Maybe you were volunteered. Either way — breathe. The role is smaller and clearer than you fear, and the first thirty days have a shape. Here it is.
First, the role — precisely
Before any task, get the role clear in your head. The Act's verbs for you are oversee and coordinate — not perform. You are not personally the person who runs every check. You are the one who makes sure the checks run, the policies work, and AUSTRAC has a named human to talk to. That's the whole job.
A reporting entity must notify AUSTRAC of the individual who is designated as the reporting entity's AML/CTF compliance officer within 14 days after the individual is designated as the AML/CTF compliance officer for the reporting entity.
The shape of the month
Now the plan. Four weeks, four jobs. Week one, stand up the role. Week two, know your risk. Week three, get the policies adopted. Week four, make the routine run. Let's take them in turn.
Week one · Stand up the role
Week one is paperwork that protects you. Get your designation in writing. Then make sure you have what the Act says the firm must give you — management-level standing, authority, independence, and resources. Asking for that is not you being difficult. It is the law's own requirement. And while you're at it, confirm the firm's AUSTRAC enrolment is done — that clock was twenty-eight days from the first designated service.
Week two · Know your risk
Week two, sit down with your firm's ML/TF risk assessment — or start one if it doesn't exist. Which designated services do you provide? Which customers, through which channels, touching which countries? The Act only asks for steps appropriate to the nature, size and complexity of your business. Small firm, simpler assessment. But everyone has one.
Week three · The policies
Week three, the AML/CTF policies. Not a template that describes someone else's firm — policies that match what your people actually do, adopted by your senior management, on the record. And inside them sits your training plan: the Act requires your people to be trained on the obligations, and on your firm's own risks. Book that training now, not someday.
Week four · Make the routine run
Week four, the everyday. Customer due diligence happens before a designated service is provided — make sure the people at the counter know the flow. And teach everyone the two triggers. A suspicion, formed honestly, starts a reporting clock. So does ten thousand dollars or more in physical cash. The episodes on this channel cover both clocks in detail.
Write it down
One habit ties the whole month together: write it down. The designation, the notice, the risk assessment, the adoption, the training bookings. Records are kept for seven years — and years from now, the record of what you did this month is your protection.
Oversee and coordinate. Not perform.
Keep coming back to those verbs. You can delegate the doing — the checks, the forms, the filing. What you own is the program: that it exists, that it matches reality, and that it runs. A conductor doesn't play every instrument.