Businesses obligated under AML/CFT laws are required to undertake an AML-CFT risk assessment. The results of the risk analysis have the purpose of identifying areas within a business with greater exposure to facilitating money laundering or terrorism financing. There are certain areas within a business that must be risk assessed.