RIGHTS AND ROLES SEPARATION 3 lines of defense 4-eyes principle User roles defined per activity Management information CDD/KYC Acceptance and review Transaction monitoring Integrated workflow Risk management PEP-and sanction check Reporting Rights and roles separation Delegated monitoring Anti money laundering