Skip to main content

Reporting on risk assessments

A high-level overview of how to report on risk assessments in Legl, including oversight, escalation, and reassessment tracking.

Written by Michelle Rufer
Updated over 3 weeks ago

Overview

Reporting on risk assessments in Legl gives MLROs, AMLCOs and compliance leads firm-wide oversight of client risk levels, escalations, and reassessment timelines.

It helps you monitor high-risk matters, review decisions, and maintain alignment with your firm’s risk policy.


What this covers

This article explains how risk assessment reporting supports compliance oversight. It covers:

  • Visibility of all risk assessments (in progress, ready for review, and completed)

  • Identification of high-risk assessments

  • Auto-escalation to MLROs, AMLCOs or nominated contacts

  • Manual overrides and version control

  • Reassessment date tracking

  • How risk assessments connect to ongoing monitoring and reporting dashboards

This article does not provide step-by-step instructions for completing a risk assessment.


How this works at a high level

Risk assessments in Legl are built against your firm’s risk policy and can be configured to reflect low, medium, or high risk (or numerical equivalents).

From a reporting perspective:

  • All risk assessments are centrally visible to the MLRO.

  • Assessments marked as high risk can be automatically escalated to one or more nominated email addresses.

  • Escalated assessments act as a structured review queue or “to-do list” for oversight.

  • MLROs can review the original responses, see a full version history, and add comments.

  • Risk ratings can be amended or overridden where appropriate, with rationale recorded.

  • Reassessment dates can be automatically set based on risk level (for example, shorter review cycles for high-risk matters).

Risk assessment outcomes also inform your broader compliance reporting, including insights dashboards and monitoring workflows.


When you would use this

You would use risk assessment reporting:

  • To review and approve high-risk clients or matters

  • When responding to regulatory or SRA enquiries

  • During internal audits or compliance reviews

  • To track upcoming reassessment dates

  • To ensure escalations are actioned in line with firm policy

  • To monitor trends in client risk across departments or workflows


Where to find this in Legl

You can access risk assessment reporting in:

  • Insights → MLRO Oversight

    • You can view new compliance dashboard overview from here too

  • Risk Assessments (for direct visibility of assessments and escalations)

  • Monitoring (to review ongoing monitoring alerts connected to client risk)


Important:

  • Risk assessments are configured against your firm’s own risk policy. The system reflects the logic you define.

  • If a risk assessment is marked as high risk, it can be automatically escalated to nominated individuals. This setting must be configured in your risk assessment settings.

  • MLROs or AMLCOs can amend or override risk ratings. All changes are recorded in version history for audit purposes.

  • Reassessment periods (for example, 30, 60, or 90 days) can be set by risk level.

  • Ongoing monitoring remains separate from risk reassessment cycles, but both contribute to overall compliance oversight.

  • Reporting dashboards may vary depending on whether you are using the new Compliance dashboard or the legacy MLRO oversight dashboard.

Did this answer your question?