CPD Seminar · AML/CFT · Technology & AI
Information Security and ICT Risk for AML Systems
Why your AML controls are only as strong as the IT controls underneath them
- Duration
- 2 hours
- CPD hours
- 2
- Level
- Intermediate to advanced
- Delivery
- On request – in person or online
- Fee
- Upon request
- Edition
- October 2026
Overview
AML controls run on systems: screening engines, CRMs, onboarding platforms and data interfaces. This seminar explains how IT weaknesses can silently break compliance, how to evaluate IT general controls and automated controls, and what DORA and the EBA guidelines require.
Who should attend
- Compliance and AML teams
- IT and information security staff
- Internal auditors
- Risk managers
- Directors
Learning objectives
- 01Explain how IT is embedded in a regulated firm's business model and AML processes
- 02Identify IT risks that can make AML controls fail without anyone noticing
- 03Describe the five areas of IT general controls and what each protects
- 04Classify automated business controls by type and nature, and understand why the nature drives the risk
- 05Explain the obligations under the EBA ICT and outsourcing guidelines, the remote onboarding guidelines and DORA
- 06Respond correctly when an IT control is found to have failed
Programme
Module 01
IT risk in a regulated firm
Definition, top risks, third-party risk
Module 02
IT general controls
Governance, access, change, operations, development
Module 03
Automated business controls
Types, nature, and what to do when they fail
Module 04
Regulatory obligations
EBA ICT and outsourcing guidelines, remote onboarding, DORA
Module 05
2025–2026 updates
DORA in force, critical providers, NIS2, AI Act
Module 06
Knowledge check
10 questions and key takeaways
Case studies covered
Latest updates included
DORA in operation
Regulation (EU) 2022/2554
NIS2 in Cyprus and the AI Act
Digital Omnibus, Regulation (EU) 2026/1744
Assessment and certificate
The session closes with a 10-question knowledge check. Participants who attend the full session and complete the check receive a certificate of completion from Kyvos Capital Ltd, recording 2 hours of training.
Your trainer

Yiannis Georgiou
HRDA-Certified Trainer – Level 5 (EQF/CyQF 5) · Αριθμός ΑνΑΔ: 55672
Executive and board director with more than 18 years in financial markets, spanning trading, dealing, portfolio management, risk, compliance and board-level governance. His seminars combine first-hand regulatory and AML responsibility with a quantitative, technology-driven approach.
Meet the trainerRequest this seminar
Available on request, in person or online. The fee is provided on request.
Related seminars

The EU AML Framework and Remote Onboarding
From the 4th Directive to AMLA, and CySEC's rules on digital KYC

AML Supervisory Updates and Practical Implementation
What CySEC and MOKAS are telling regulated firms, and how to act on it

Crypto-Asset Service Providers: AML in Practice
MiCA authorisation, EBA risk factors, the travel rule and sanctions screening
Seminars are delivered on request by Kyvos Capital Ltd, Limassol, Cyprus, and led by Yiannis Georgiou, HRDA-Certified Trainer – Level 5 (Αριθμός ΑνΑΔ: 55672). Fees are provided on request. Seminar content is provided for training purposes only and does not constitute legal, regulatory or investment advice.
