Published on

The goAML application is a UNODC strategic response to financial crime including money laundering and terrorist financing. The goAML application has been developed by the Information Technology Service of UNODC in partnership with the UNODC Global Programme Against Money Laundering. It is an integrated database and intelligent analysis system intended for use by Financial Intelligence Units worldwide.


Published in: Economy & Finance, Technology
1 Like
  • Be the first to comment

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide


  1. 2. Anti Money Laundering, Data Collection and Reporting <ul><li>Information Technology Service External Systems Unit </li></ul><ul><li>Global Programme against Money Laundering </li></ul>
  2. 3. Money Laundering/Terrorist Financing – The World’s Response <ul><li>Establish a global environment hostile to money laundering and terrorist financing </li></ul><ul><li>Implement international standards including the FATF 40+9 recommendations </li></ul><ul><li>Establish Financial Intelligence Units around the world </li></ul><ul><li>Establish protocols and platforms for sharing intelligence and evidence </li></ul><ul><li>Secure technical assistance for countries to implement international standards </li></ul><ul><li>Uniform and standard AML platform - desirable </li></ul>
  3. 4. Anti-Money Laundering Process <ul><li>Three essential components of an AML/CFT regime: </li></ul><ul><ul><li>A functional compliance culture </li></ul></ul><ul><ul><li>Functional regulatory bodies – central Bank, SEC, Insurance Regulator etc </li></ul></ul><ul><ul><li>An effective financial intelligence unit tasked with: </li></ul></ul><ul><ul><li>The above processes ideally should be automated particularly if they involve high data volumes </li></ul></ul>
  4. 5. From Start to Finish
  5. 6. Brief History – ITS <ul><li>2005 – UNODC appointed project manager for EC project in Nigeria </li></ul><ul><li>Significant component – provision of IT solutions to EFCC including NFIU </li></ul><ul><li>March 2006 UNODC ITS tasked with developing IT solutions </li></ul><ul><li>April 2006 – ITS commences developing database and analytical tools for NFIU </li></ul><ul><li>June 2006 – XML Schema introduced to Nigerian reporting institutions </li></ul><ul><li>October 2006 – CTR database and basic analytical functions installed in NFIU and tested </li></ul>
  6. 7. Brief History – GPML <ul><li>Frequent requests from developing FIUs for IT solutions </li></ul><ul><li>Early involvement in Nigeria project including in advisory role to IT component </li></ul><ul><li>Potential for goAML beyond the Nigeria project recognized </li></ul><ul><li>Simultaneous – work commences on widening the scope of the system beyond Nigeria </li></ul>
  7. 8. Current – Future <ul><li>February 07 </li></ul><ul><ul><li>Data collection tools completed </li></ul></ul><ul><ul><li>Analytical functionality available </li></ul></ul><ul><ul><li>Drawing tools phase 1 nearing completion </li></ul></ul><ul><ul><li>Rules engine under construction </li></ul></ul><ul><ul><li>Profiling tool under construction </li></ul></ul><ul><li>July 07 </li></ul><ul><ul><li>STR system completed </li></ul></ul><ul><ul><li>Profiling tool completed </li></ul></ul><ul><ul><li>Intelligence file management completed </li></ul></ul><ul><ul><li>Workflow system completed </li></ul></ul><ul><ul><li>Drawing tools phase 1 completed </li></ul></ul>
  8. 9. Current – Future <ul><li>September 2007 </li></ul><ul><ul><li>Phase 1 goCASE complete </li></ul></ul><ul><li>June 2008 </li></ul><ul><ul><li>Drawing tools completed </li></ul></ul><ul><ul><li>Rule engine and editor completed </li></ul></ul><ul><ul><li>Full user documentation in multiple languages (English, French, Spanish, Russian) </li></ul></ul><ul><ul><li>goAML (complete suite) VERSION 1.0 READY! </li></ul></ul><ul><li>July 2008 </li></ul><ul><ul><li>Phase 2 goCASE complete </li></ul></ul>
  9. 10. <ul><li>Designed as a modular system to fit the needs of any FIU irrespective of size </li></ul><ul><li>from a single computer with a few thousand processes - up to 500 million processes over 5 year period irrespective of file size </li></ul><ul><li>Processes and analyzes reports on: </li></ul><ul><ul><li>- Suspicious transactions </li></ul></ul><ul><ul><li>- Financial transactions – of any type </li></ul></ul><ul><ul><li>- List or alert based reports – CFT etc </li></ul></ul><ul><li>Fully electronic data collection and dissemination from any source such tax, law enforcement records, immigration service (passenger movement records), property registrar, vehicle registrar etc…. </li></ul>goAML – global Operations Anti-Money Laundering
  10. 12. goAML – global Operations Anti-Money Laundering Anti-Money Laundering Solution Building Blocks
  11. 13. goAML – Collecting and Managing Information <ul><li>Reporting standard defined: </li></ul><ul><ul><li>XML based (world standard format) </li></ul></ul><ul><ul><li>Samples available for FI IT Personnel </li></ul></ul><ul><ul><li>Exhaustive documentation available </li></ul></ul><ul><li>Validation application: </li></ul><ul><ul><li>Checks for valid XML </li></ul></ul><ul><ul><li>All required fields are present </li></ul></ul><ul><ul><li>Data types are correct </li></ul></ul><ul><ul><li>Ensures reporting entities report in the correct format from day 1 </li></ul></ul>
  12. 14. goAML – Gathering and Managing Information <ul><li>Secure website (SSL 512 bit encryption) for: </li></ul><ul><li>Creating reporting entities </li></ul><ul><ul><li>- by the FIU </li></ul></ul><ul><li>Creating contacts </li></ul><ul><li>Changing contact details </li></ul><ul><ul><li>- by the reporting entity </li></ul></ul><ul><li>Report upload </li></ul><ul><li>Report data entry </li></ul><ul><ul><li>- manually if necessary </li></ul></ul><ul><li>Report verification </li></ul><ul><ul><li>- clean up by system </li></ul></ul>
  13. 15. goAML – Gathering and Managing Information <ul><li>Report History </li></ul><ul><li>- what reported </li></ul><ul><li>- accepted/rejected ref number </li></ul><ul><li>View uploaded report </li></ul><ul><li>- Individually </li></ul><ul><li>Submission status </li></ul><ul><li>- accepted/rejected </li></ul><ul><li>Common content for any reporting entity </li></ul><ul><li>- flexible </li></ul><ul><li> - secure information from FIU </li></ul><ul><li> - compliance circulars </li></ul><ul><li> - alerts </li></ul><ul><li> - name lists </li></ul>
  14. 16. goAML – High Volume Analysis <ul><li>Support analytical and investigation teams with highly sophisticated reporting capabilities. </li></ul><ul><li>Visualize large volumes of data to help understand the big picture. </li></ul><ul><li>Monitor potentially suspicious accounts. </li></ul><ul><li>Reveal patterns and hidden connections. </li></ul><ul><li>Create analytical charts manually or automatically. </li></ul>
  15. 17. <ul><li>Workflow for STR analysis </li></ul><ul><li>Tasks and the process diagram are defined by the FIU users </li></ul><ul><ul><li>- can change to suit their own needs </li></ul></ul><ul><ul><li>- full visual designer </li></ul></ul><ul><li>Task assignment and tracking </li></ul><ul><ul><li>- within FIU </li></ul></ul><ul><ul><li>- push or pull reports by e-mail </li></ul></ul><ul><li>Integrated reporting </li></ul><ul><ul><li>- workflow reports </li></ul></ul><ul><ul><li>- assignments </li></ul></ul><ul><ul><li>- progress </li></ul></ul><ul><ul><li>- results </li></ul></ul>goAML – Collecting, Managing and Analyzing Information
  16. 18. <ul><li>Integrated source tracking </li></ul><ul><ul><li>- tracks externally sourced information </li></ul></ul><ul><ul><li>- creates bring-ups, reminders etc </li></ul></ul><ul><li>Automatic resource scheduling </li></ul><ul><ul><li>- automatically assigns tasks </li></ul></ul><ul><ul><li>- monitors workloads </li></ul></ul><ul><ul><li>- measures outputs/performance </li></ul></ul><ul><li>Case feedback integration </li></ul><ul><ul><li>- Produces standardized feedback </li></ul></ul><ul><ul><li>- reports as word documents </li></ul></ul>goAML – Collecting, Managing and Analyzing Information
  17. 19. <ul><li>Customizable data gathering templates </li></ul><ul><li>- standardized format for receipt of information </li></ul><ul><li>from outside agencies that decides </li></ul><ul><li>transmission medium (email/fax/post) </li></ul><ul><li>Time in flight analysis </li></ul><ul><li>- Time management measure </li></ul>goAML – Collecting, Managing and Analyzing Information
  18. 20. <ul><li>Common user interface across analysis screens </li></ul><ul><ul><li>- screens look and feel the same </li></ul></ul><ul><ul><li>- supports multiple languages </li></ul></ul><ul><li>Workspace based (keep information through different reporting sessions) </li></ul><ul><ul><li>- two work spaces available at any one time </li></ul></ul><ul><ul><li>- previous work automatically saved </li></ul></ul><ul><ul><li>- supports text, tables, merged tables, pictures </li></ul></ul>goAML – Analysis and Targeting Solution
  19. 21. <ul><li>Analyst can retrieve, filter and re-arrange the data accordingly to his/her needs. </li></ul><ul><ul><li>- Rearrange data fields </li></ul></ul><ul><ul><li>- Change grouping </li></ul></ul><ul><ul><li>- Filter data </li></ul></ul><ul><ul><li>- Change data sorting </li></ul></ul><ul><ul><li>- Save layout </li></ul></ul><ul><ul><li>- Export </li></ul></ul>goAML – Analysis and Targeting Solution
  20. 22. <ul><li>Linking to other screens from current screen </li></ul><ul><li>Allows easy comparison of different accounts, persons or entities </li></ul><ul><li>Each window acts independent of others </li></ul><ul><li>Copy fields or rows </li></ul><ul><li>Makes analysis easy </li></ul><ul><li>Very easy to learn </li></ul><ul><li>All these components have restricted access </li></ul>goAML – Analysis and Targeting Solution
  21. 23. goAML – Analysis Trails Link charts association charts – transaction flow charts etc <ul><li>Money and person trails for inbound and outbound transactions </li></ul><ul><li>Trail for duplicated addresses, phone numbers and other identification data </li></ul><ul><li>Displays: </li></ul><ul><ul><li>- source and destination </li></ul></ul><ul><ul><li>displayed as nodes </li></ul></ul><ul><ul><li>- direction and amount </li></ul></ul><ul><ul><li>displayed as arrows </li></ul></ul>
  22. 24. goAML – Analysis - Pivots <ul><li>Reports offer many different views of data under analysis </li></ul><ul><li>Allows for dynamic user filtering and grouping of related data </li></ul><ul><li>Allows for searching for TOP targets - 5/10/50 etc </li></ul><ul><li>Flexible data search capability </li></ul><ul><li>Simple integration with Excel </li></ul><ul><ul><li>- excellent for net worth analysis </li></ul></ul><ul><ul><li>- ease of attachment to intel reports </li></ul></ul><ul><ul><li>- arrives live so can be manipulated </li></ul></ul><ul><ul><li>by receiver </li></ul></ul>
  23. 25. goAML – Analysis - Intersect <ul><li>Combines data from two different reports </li></ul><ul><ul><li>- User chooses the two reports populated with data and t he columns to intersect </li></ul></ul><ul><ul><li>Result is displayed in a completely </li></ul></ul><ul><ul><li>new window with the intersected data </li></ul></ul>
  24. 26. goAML – Information Dissemination <ul><li>Suspicious activity detected </li></ul><ul><li>Open a new case – analysis output attached </li></ul><ul><li>goCASE picks this up </li></ul><ul><li>Export case to MS-WinWord </li></ul><ul><ul><li>- Case file remains with FIU </li></ul></ul><ul><ul><li>- Output in the form of Intel report </li></ul></ul><ul><ul><li>- Sanitised to the level required by the user </li></ul></ul>
  25. 27. goAML - User and role based functions <ul><li>Management: Is able to check the submissions and the status of reporting entities. - performance measure/compliance </li></ul><ul><li>Analyst: Responsible of conducting the analysis, finding suspicious activities and linking to similar-patterned cases where they exist - analysis </li></ul><ul><li>Administrator: Allowed to add new user, give/revoke access to screens and different actions. </li></ul><ul><li>Access to certain actions is dependant on the user’s role! </li></ul>
  26. 28. goAML - Security <ul><li>Username and password required to access applications. </li></ul><ul><li>Access can be granted and revoked per: </li></ul><ul><ul><li>- User </li></ul></ul><ul><ul><li>- Screen </li></ul></ul><ul><ul><li>- Certain actions like copy, export etc. </li></ul></ul><ul><li>Access to screens and data is logged. </li></ul><ul><li>Data partially encrypted in the database. </li></ul><ul><li>- Encryption level and extent at the discretion of the user </li></ul>
  27. 29. goAML - Security <ul><li>Access to the system generally or to any part of it at the discretion of the user – the user must “open the gate” </li></ul><ul><li>UNODC does not hold private key – cannot decipher encrypted data </li></ul><ul><li>Rule engine secure </li></ul><ul><li>Database and system tools installed on the user’s premises, UNODC has no independent access </li></ul>
  28. 30. goAML – System Requirements <ul><li>• Assumes average data load – 500,000 reports per month </li></ul><ul><li>Assumes 15 users </li></ul><ul><li>Assumes reasonable level of existing infrastructure including security </li></ul><ul><ul><li>- Mail servers </li></ul></ul><ul><ul><li>- Local area network </li></ul></ul><ul><ul><li>- DMZ with 2 firewalls </li></ul></ul><ul><ul><li>- Anti-spam and anti-virus policy </li></ul></ul><ul><li>Provide fully redundant environment </li></ul><ul><ul><li>- 2 DB Servers </li></ul></ul><ul><ul><li>- 2 Application servers </li></ul></ul><ul><ul><li>- Storage area network (SAN) </li></ul></ul><ul><ul><li>- Backup robot servers </li></ul></ul><ul><ul><li>- Public key infrastructure certificates (PKI) </li></ul></ul><ul><ul><li>- 15 high end personal computers (PCs) Approx: $220,000 </li></ul></ul><ul><ul><li> </li></ul></ul>
  29. 31. goAML – Estimated Costs <ul><li>goAML software package is free of charge </li></ul><ul><li>Installation – initial training US$ 80,000 </li></ul><ul><li>(depending on location – 3 visits x 2 persons) </li></ul><ul><li>Annual user license agreement US$ 100,000 </li></ul><ul><ul><li>- This fee will decrease as more </li></ul></ul><ul><ul><li>users take up the system </li></ul></ul><ul><ul><li>- Provides support within working </li></ul></ul><ul><ul><li>hours in local time zones </li></ul></ul><ul><ul><li>- Provides ongoing system development </li></ul></ul><ul><ul><li>- Guarantees one on-site visit per year ____________ </li></ul></ul><ul><ul><ul><ul><ul><li>US$ 180,000 </li></ul></ul></ul></ul></ul>
  30. 32. Breakdown of Costs (Basic installation) <ul><li>Installation – US$80,000 </li></ul><ul><ul><li>Establishment of standard reporting scheme for reporting institutions </li></ul></ul><ul><ul><li>Training of reporting institution compliance and IT staff; </li></ul></ul><ul><ul><li>Customisation of report formats and forms </li></ul></ul><ul><ul><li>Customisation of goAML interfaces to individual user requirements </li></ul></ul><ul><ul><li>Migration of existing data to goAML database </li></ul></ul><ul><ul><li>Installation of goAML and completion of data migration </li></ul></ul><ul><ul><li>Implementation of reporting system </li></ul></ul><ul><ul><li>Training of FIU management, analysts and IT personnel </li></ul></ul><ul><ul><li>Follow up and troubleshooting </li></ul></ul><ul><ul><li>Time frame 3 – 6 months depending on existing infrastructure and current operating environment. </li></ul></ul>
  31. 33. <ul><li>Maintenance, support and development fee – US$100,000 per annum </li></ul><ul><li>Time zone specific, business hour support by e-mail, phone or fax – provided by regional support centers </li></ul><ul><li>Outside business hours support provided from other time zones where language permits </li></ul><ul><li>Ongoing, needs based, customization and development. </li></ul><ul><li>At least one site visit per annum timed to the requirements of the user </li></ul><ul><li>Continuous minor upgrade and patch service </li></ul><ul><li>Periodical major upgrades – new releases </li></ul><ul><li>Regular regional user group meetings and online forums </li></ul><ul><li>Access, where necessary, to the full resources of the ITS Service of UNODC </li></ul>Breakdown of Costs (Basic installation)
  32. 34. <ul><li>Initial Deployment/Installation – US$600,000, maintenance and development fee – US$300,000 pa. (Assumes maximum 15 users) </li></ul><ul><li>Includes all services of Basic Installation plus: </li></ul><ul><li>Site assessment </li></ul><ul><li>Skills assessment </li></ul><ul><li>Design and supervise build of physical infrastructure </li></ul><ul><li>Design and plan full system architecture </li></ul><ul><li>Purchase, delivery and installation of all server and storage equipment </li></ul><ul><li>Purchase software licenses </li></ul>Breakdown of Costs (Standard installation)
  33. 35. <ul><li>Initial Deployment/Installation – US$3,200,000, maintenance and development fee – US$1,200,000 pa. (Assumes maximum 100 users) </li></ul><ul><li>Includes all services of Standard Installation plus: </li></ul><ul><li>Purchase, delivery and installation of all equipment (full IT infrastructure and telecommunications) </li></ul><ul><li>A support team on-site backed up by a development team offsite </li></ul><ul><li>Purchase software licenses </li></ul><ul><li>Management of maintenance contracts with suppliers </li></ul><ul><li>Management of the buildup of the local IT unit with gradual hand over </li></ul><ul><li>Full hardware and software upgrades and replacements (3 year cycle) </li></ul><ul><li>Project duration (3-5 years) </li></ul>Breakdown of Costs (Premium installation)
  34. 36. <ul><li>Impossible is not a fact, </li></ul><ul><li>only an opinion </li></ul><ul><li>Thank you! </li></ul>