AML/CTF Compliance Program
AML Compliance Program Enquiry FormFrom the 1st July 2026 all law firms that offer 'designated services' will be subject to the provisions of the Anti-Money Laundering and Counter-Terrorism Financing Act 2006.
JurisIT has been providing compliance services to law firms since 2015 encompassing cybersecurity, privacy and data protection so we understand the nuanced compliance requirements for Australian law firms.
Over the past 12 months we have undertaken extensive research on how legal firms in the United Kingdom and New Zealand have been dealing with their AML/CTF requirements. Paying particular attention to issues that unduly utilised staff time and firm resources.
Combining this research with the guidance released by AUSTRAC we have developed a simple yet comprehensive AML/CTF program that uses the Microsoft 365 platform and will ensure that you meet all your AML/CTF compliance requirements with a minimum of expense and effort on your part.
The JurisIT AML/CTF program includes:
• a tailored firm-wide risk assessment specifically for your firm,
• bespoke ML / TF / PF policies and procedures,
• client onboarding and due diligence workflows,
• registers for high-risk clients, reports, staff screening, and training,
• annual reporting data and reporting procedures,
• ongoing policy and process updates,
• staff training on changes and general support, as well as,
• role-based staff training.
We use the data already contained in your practice management system (PMS) to prepare your ML/TF risk assessment and the appropriate AML/CTF program for your firm.
Your PMS contains all the information needed for your Firm Wide Risk Assessment (FWRA). The FWRA risk assessment is the first step in your AML compliance journey and identifies your firms risk profile and the initial AML requirements you must meet.
Our program follows AUSTRAC guidance and state law society guidelines. It is designed specifically for Australian law firms, enabling you to meet your AML requirements with minimal disruption, it consists of two parts:
1. Program Implementation: The initial risk assessment and development of the appropriate policies that match your firms risk profile;
2. Program Review and Updates: Policies and training modules are regularly updated to reflect changes in regulatory requirements and market conditions.