Skip to content

Why business units resist Financial Crime Risk Assessments and how to bring them onside

Understanding the psychology, pressures and incentives behind frontline resistance and turning adversaries into allies

Introduction: Why resistance is normal, predictable and unhelpful

Every MLRO has at one point probably experienced the same pattern. They request input for the financial crime risk assessment. The business delays. Information arrives incomplete. Controls are overstated. Issues are minimised. Deadlines drift and frustrations grow. This familiar resistance is not evidence of bad intent; it is the natural outcome of competing priorities, operational constraints and a widespread misunderstanding of the purpose of the financial crime risk assessment. To solve the problem, we must first understand it. Judging frontline teams only deepens the divide but seeing their resistance as predictable, human and solvable allows genuine partnership to emerge.

Why the first-line business may push back

Business units operate under immense pressure. They juggle customer expectations, commercial targets, operational bottlenecks, limited staffing, product timelines, regulatory demands and technology limitations. In this environment, financial crime risk management and compliance, while important, rarely feels urgent. 

So when requests for financial crime risk assessment inputs arrive, they are often perceived as administrative burdens that divert attention from “real work.” For many teams, the process feels like an unwelcome audit: time-consuming, unclear and potentially exposing weaknesses they fear will be judged. This resistance is emotional as much as practical and may also be deeply structural or cultural as well. Acknowledging these realities is the first step toward overcoming them.

The business may feel the fear of being “marked down”

A major driver of resistance may be borne out of fear. Many business leaders worry that being transparent will result in audit findings, heightened regulator attention, executive criticism, remediation projects or even blame. 

To protect themselves, they may under-report issues, overstate control strength and present an idealised version of reality. This behaviour is not malicious, it is defensive. It reflects a culture in which the financial crime risk assessment is viewed as a mechanism of judgment rather than a tool for improvement. The MLRO’s challenge is to transform this perception and reframe the assessment as a collaborative exercise designed to protect the business, not expose it.

The Language of Risk Is Not the Language of the Business

Risk teams and business teams often speak completely different languages. Risk professionals think in inherent risk, control effectiveness, typologies and exposure. Business leaders think in customer experience, operational efficiency, speed, revenue and product adoption. When these two worlds collide without translation, misunderstanding is inevitable. But when they are aligned, cooperation accelerates. The compliance professional’s role is to bridge the gap – to translate risk concepts into operational implications, and to translate business constraints into risk considerations. By doing so, misunderstandings should dissolve, with resistance softening and collaboration becoming significantly easier.

Partnership, Not Policing

Business units often respond positively when they see risk and compliance as a partner rather than a critic. When risk and compliance is framed as a policing function, defensiveness increases; when it is framed as a collaborative effort to strengthen the organisation, behaviour shifts immediately. Authentic partnership requires listening, empathy, constructive framing and a commitment to supporting improvement rather than allocating blame. It requires recognising operational pressures, acknowledging competing priorities and celebrating transparency rather than punishing it. Financial crime risk assessments flourish when compliance teams collaborate with their counterparts from the business.

Clarity and predictability reduce anxiety

Ambiguity is one of the greatest sources of resistance. When timelines shift, scoring logic is unclear, evidence requirements seem arbitrary or governance feels inconsistent, business units retreat. The MLRO must remove uncertainty by providing clear expectations, consistent processes, transparent logic and predictable governance. When teams understand the process, know what is required and can plan accordingly, they engage more willingly. Predictability builds trust, whereas uncertainty breeds avoidance.

Psychological safety as a compliance capability

The most effective MLROs recognise that people engage fully only when they feel safe and heard. Creating psychological safety is not a soft cultural exercise,  it is a critical element of operational success. When people feel they can disclose risks and control weaknesses without fear of judgement or punishment, the quality of the financial crime risk assessment improves exponentially. Building this environment requires acknowledging business constraints, inviting challenge, celebrating honesty, explaining context, respecting operational realities and valuing contributions. In its presence, transparency thrives but in its absence, the entire financial crime risk assessment can easily become distorted.

Conclusion: Resistance is a symptom – culture is the cure

Financial Crime Risk Assessments are fundamentally human systems. When business units resist, it signals not a compliance failure but a cultural one –  a disconnect between purpose and perception, between operational reality and governance expectation.

MLROs who understand the psychology behind this resistance and who approach the business with partnership, clarity and empathy, build financial crime risk assessments that are honest, insightful and organisationally transformative. When aligned, engaged and supported, first line business teams become the strongest contributors to an accurate and meaningful financial crime risk assessment and the organisation becomes better because of it.

Posted in , ,