I am adding a risk assessment to my AML/BSA Policy. (Our CIP policy is part of this and I have a risk assesment in it, but I am being informed by examiners that I need it as part of the AML/BSA. Would someone be willing to share with me that portion of their policy so I can see where to start. Also I am to establish written procedures for internal investigations, monitoring and reporting of suspicious transactions for all major business lines. I could sure use some help there as well. My email address is dtimberlake@c-f-b.com. Thanks