Suspicious Activity Report
What is Suspicious Activity Report?
A filing required by financial institutions when they detect known or suspected criminal activity or suspicious transactions that may indicate money laundering.
Frameworks that govern suspicious activity report
What the standards actually require on suspicious activity report
Requirements naming suspicious activity report across 6 standards, quoted from the control text.
Institutions shall file SARs with FinCEN within 30 days of detection (or 60 if no subject identified) for transactions meeting reporting thresholds and indicia.
BSA-AML-09 · Suspicious Activity Reporting (SAR) →NSS-17 + NSS-42-G require personnel security + trustworthiness verification + training + awareness aligned with CSL access. Personnel security: background check + criminal record + financial + employment history + reference check + national security clearance...
IAEA-NSS17-Personnel-Trustworthiness-Training-Awareness · IAEA NSS-17 - Personnel Security + Trustworthiness + Training + Awareness + Cyber Hygiene →Liechtenstein DSG Articles 9 + 23-24 Special Categories of Personal Data (transposing GDPR Article 9). Special Categories: racial or ethnic origin + political opinions + religious or philosophical beliefs + trade union membership + genetic data + biometric dat...
LIDPA-Special-Categories-Sensitive-Data-Children-Article-9-GDPR-Article-9-Health-Financial-Sector · Liechtenstein DPA Special Categories + Sensitive Data + Children + Article 9 →Apply data minimisation + scope enforcement + localisation + cross-border transfers per applicable regulation. Data Minimisation and Scope Enforcement must (a) enforce OAuth scope checking at every API endpoint + (b) return only data within authorised scope +...
OPENBANK-5 · Data Minimisation, Scope Enforcement, Localisation, Cross-Border Transfers →Systems and controls, training among them, are used to manage the managing agent's regulatory obligations and its exposure to financial crime. Reporting and MI: incidents are reported promptly to Lloyd's and to the UK authorities;
principles-for-doing-business-at-lloyd-s::P11.3 · 11.3 Systems and controls, including training, for regulatory responsibilities and financial crime risk →RICS-regulated firms must record and retain how they have met the standard; must hold identity documents and address details securely and no longer than the anti-money laundering retention period strictly demands;
rics-rules-of-conduct-and-global-professional-standards::CFC-3F-c · Money laundering: records, secure retention of identity data, outsourcing terms and digital currency awareness →Questions people ask about suspicious activity report
What is Suspicious Activity Report?
Why is Suspicious Activity Report important for compliance?
Which compliance frameworks address Suspicious Activity Report?
Where can I learn more about Suspicious Activity Report?
See how Suspicious Activity Report applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.