Kyvos Capital block-K mark
KYVOSCAPITAL LTD

CPD Seminar · AML/CFT · Technology & AI

Information Security and ICT Risk for AML Systems

Why your AML controls are only as strong as the IT controls underneath them

Duration
2 hours
CPD hours
2
Level
Intermediate to advanced
Delivery
On request – in person or online
Fee
Upon request
Edition
October 2026

Overview

AML controls run on systems: screening engines, CRMs, onboarding platforms and data interfaces. This seminar explains how IT weaknesses can silently break compliance, how to evaluate IT general controls and automated controls, and what DORA and the EBA guidelines require.

Who should attend

  • Compliance and AML teams
  • IT and information security staff
  • Internal auditors
  • Risk managers
  • Directors

Learning objectives

  1. 01Explain how IT is embedded in a regulated firm's business model and AML processes
  2. 02Identify IT risks that can make AML controls fail without anyone noticing
  3. 03Describe the five areas of IT general controls and what each protects
  4. 04Classify automated business controls by type and nature, and understand why the nature drives the risk
  5. 05Explain the obligations under the EBA ICT and outsourcing guidelines, the remote onboarding guidelines and DORA
  6. 06Respond correctly when an IT control is found to have failed

Programme

Module 01

IT risk in a regulated firm

Definition, top risks, third-party risk

Module 02

IT general controls

Governance, access, change, operations, development

Module 03

Automated business controls

Types, nature, and what to do when they fail

Module 04

Regulatory obligations

EBA ICT and outsourcing guidelines, remote onboarding, DORA

Module 05

2025–2026 updates

DORA in force, critical providers, NIS2, AI Act

Module 06

Knowledge check

10 questions and key takeaways

Case studies covered

The screening threshold nobody approved
The silent interface failure
The super-user who cleared the queue
Risk ratings lost in a CRM migration
A breach at the KYC vendor

Latest updates included

  • DORA in operation

    Regulation (EU) 2022/2554

  • NIS2 in Cyprus and the AI Act

    Digital Omnibus, Regulation (EU) 2026/1744

Assessment and certificate

The session closes with a 10-question knowledge check. Participants who attend the full session and complete the check receive a certificate of completion from Kyvos Capital Ltd, recording 2 hours of training.

Your trainer

Portrait of Yiannis Georgiou

Yiannis Georgiou

HRDA-Certified Trainer – Level 5 (EQF/CyQF 5) · Αριθμός ΑνΑΔ: 55672

Executive and board director with more than 18 years in financial markets, spanning trading, dealing, portfolio management, risk, compliance and board-level governance. His seminars combine first-hand regulatory and AML responsibility with a quantitative, technology-driven approach.

Meet the trainer

Request this seminar

Available on request, in person or online. The fee is provided on request.

Seminars are delivered on request by Kyvos Capital Ltd, Limassol, Cyprus, and led by Yiannis Georgiou, HRDA-Certified Trainer – Level 5 (Αριθμός ΑνΑΔ: 55672). Fees are provided on request. Seminar content is provided for training purposes only and does not constitute legal, regulatory or investment advice.