AML Culture Lab: what your files say about your culture

Anti‑money laundering in law firms is no longer being read as a narrow rules exercise. The SRA’s recent AML annual reports, training thematic review and source‑of‑funds/wealth review all treat AML as a test of leadership, systems and culture – a “living framework” rather than a static policy set. At the same time, enforcement data and proactive inspections show that a significant minority of firms still struggle with basic disciplines such as client and matter risk assessment, documenting source of funds, and keeping AML frameworks up to date.

Most firms now have the right words on paper. The gap is between the AML framework as designed and AML as lived: how people actually behave with real clients, real files and real time‑pressure. That is the gap the AML Culture Lab is designed to make visible.

From “policy compliance” to operating‑system reality

Recent SRA work highlights three recurring themes that go beyond technical compliance:

• Strong policies, weak execution: firm‑wide risk assessments, client/matter risk assessments and source‑of‑funds checks that exist on paper but are incomplete, untailored or poorly evidenced in a material proportion of files.
• Training that does not consistently change behaviour: generic AML training, uneven role‑specificity, and limited evidence of professional scepticism and escalation comfort in practice.
• Leadership ownership and systems: expectations that partners and boards treat AML as a core governance issue, with regular board‑level engagement, MI, and system‑driven safeguards rather than relying only on individual professional judgment.

These are all culture questions framed through AML. They are about architecture, incentives, learning and reality‑attunement in the firm – not just about checklists.

What an AML Culture Lab does

The AML Culture Lab reads your existing AML framework as a culture artefact. Rather than adding more surveys or templates, we work with what is already there:

• A sample of your real files (for example, higher‑risk matters in conveyancing, corporate or private client work).
• Your firm‑wide and client/matter risk assessments, AML policies and controls, SOF/SOW processes and training approach.
• Existing independent AML audit reports and internal review findings where available.

We then use the eight Organisational Behavioural Economics axes as a lens on that material, focusing particularly on Ethics, Learning, Measurement and Reality for AML purposes. In practice, that means looking at:

• How people trade off client pressure, time and fee targets against thorough CDD and SOF/SOW work.
• What “shortcuts” or rules‑of‑thumb seem to be in play when risk assessments are incomplete, copy‑pasted or missing.
• How far training messages are reflected in everyday decisions, escalation patterns and file‑review findings.
• How accurately leadership sees the true picture on AML quality, and how quickly the firm responds when reality contradicts the preferred narrative.

The output is not a second AML legal opinion. It is a behavioural and cultural reading of your AML framework that explains why certain issues keep recurring and where small changes to the operating system would make the biggest difference.

How this maps to SRA AML expectations

To keep this grounded in current supervision, the AML Culture Lab is explicitly mapped to key SRA AML themes:

Training and leadership engagement

We examine how AML expectations are communicated, who delivers training, how role‑specific it is, and what signals leaders send about AML when balancing commercial and compliance pressures.

Client/matter risk assessments and firm‑wide risk assessments

We look at how risk assessments are actually completed, the heuristics fee‑earners use, and where the architecture or measurement system makes it easier to treat them as a formality.

Source of funds and source of wealth discipline

We read your SOF/SOW processes and sample files through the lens of bounded rationality and incentives: when do people do excellent work, when do they cut corners, and what does that tell you about capacity, training, supervision and perceived risk?

Systems, monitoring and escalation

We consider how system‑driven “stops”, file reviews, escalation channels and MI interact with culture – for example, whether people feel safe escalating, whether file findings are used for learning, and how quickly patterns of weakness are surfaced and addressed.

Each of these areas is mapped back to the relevant axes (for example, Architecture and Measurement for systems and controls; Learning and Ethics for training and decision‑making; Reality and Intelligence for risk assessment and MI), so you get a coherent picture rather than a list of fixes.

Non‑invasive, but not superficial

The AML Culture Lab is deliberately non‑invasive. We do not arrive with a new off‑the‑shelf AML template or a wholesale organisational redesign. We start with your existing framework, files and regulatory responses, then:

• Make explicit what those artefacts already say about culture, incentives and decision‑making.
• Identify a small number of leverage points in the operating system – for example, how risk assessments are integrated into matter opening, how training is reinforced in supervision, or how MI is presented to the board.
• Offer options for change that work with your current architecture and regulatory obligations, rather than against them.

For COLPs, COFAs, MLROs and managing partners, the result is a clearer, evidence‑based narrative: not just “we have AML policies and training”, but “we understand how AML actually lives in the firm, how this aligns with the latest SRA expectations, and what we are doing about the culture drivers behind our AML risk.”