The BSA/AML Audit Simulator evaluates your program against FinCEN's five-pillar framework in under 10 minutes and scores your readiness

Regulatory examinations are not the time to discover that your AML program has serious gaps. Yet that is exactly when most businesses learn what is missing - because they have never conducted a formal assessment of their own program against the standard an examiner will apply. The BSA/AML Audit Simulator was built to solve this problem: it gives regulated businesses a way to evaluate their compliance readiness on their own terms, before an examiner does it for them. The simulator is free, takes under 10 minutes to complete, and produces a scored assessment that maps directly to the five-pillar framework FinCEN examiners use.

Three score bands: Examination Risk (0-59%), Needs Improvement (60-84%), and Exam Ready (85%+)

The simulator evaluates your program across all five mandatory BSA elements: internal controls, independent testing, the designated BSA compliance officer, training for appropriate personnel, and customer due diligence procedures. For each pillar, you answer a series of targeted questions about your current practices. The questions are designed to expose the most common examination findings - the gaps that regulators cite repeatedly across industries and that cost businesses the most in remediation. Your answers produce a composite score that places your program in one of three readiness bands: Examination Risk, Needs Improvement, or Exam Ready.

Examination Risk scores indicate critical structural gaps that would likely trigger enforcement action

An Examination Risk score - typically below 60 percent overall - means your program has critical gaps that would likely trigger a formal enforcement action or a Matters Requiring Attention letter if discovered by a regulator. This does not mean your business is doing nothing right. It means the structural deficiencies in your program are severe enough that an examiner would flag them as priorities requiring immediate correction. Common patterns at this score include missing independent testing, a BSA compliance officer without sufficient authority or time, training that is generic rather than role-specific, and customer identification procedures that lack actual verification documentation.

Needs Improvement scores mean most elements exist but have meaningful weaknesses requiring focused remediation

A Needs Improvement score - generally between 60 and 84 percent - indicates a program that has most of the required elements in place but with meaningful weaknesses that examiners would document as findings. This is the most common score band for businesses that have made good-faith efforts to build compliance programs but have not kept them current or have not aligned them with current examination standards. Typical gaps here include outdated risk assessments, training that has not been refreshed within the past year, transaction monitoring procedures that are documented but not consistently followed, and recordkeeping that is incomplete for certain customer segments. The good news: these gaps are almost entirely fixable with focused remediation.

Exam Ready scores indicate a program positioned to avoid serious findings, though documentation must be maintained

An Exam Ready score - 85 percent or higher - means your program structure satisfies the core requirements an examiner would evaluate, and the remaining gaps are minor or operational rather than structural. Achieving this score does not guarantee a clean examination - no self-assessment can replicate the depth of a regulator's review - but it does mean your program is positioned to avoid the serious findings that generate enforcement actions and civil penalties. Businesses that score Exam Ready typically have current risk assessments, documented and followed procedures, recent independent testing, role-specific training with verifiable certificates, and a BSA officer with genuine authority and organizational support.

The simulator provides industry-specific guidance calibrated for MSBs, mortgage lenders, real estate professionals, and other regulated industries

The simulator goes beyond scoring to provide specific, actionable guidance based on your results. For each pillar where you score below the threshold, the tool identifies the exact deficiency patterns that are most likely to apply to your situation and links you to the relevant Soflo Consulting resources that address those specific gaps. This is not generic advice. A business that scores low on independent testing receives guidance specific to testing scope and frequency requirements for their industry. A business that scores low on training receives guidance on role-specific curriculum design and documentation standards. The goal is to turn assessment into action as quickly as possible.

Simulator output serves as educational evidence for senior management and boards seeking to understand compliance risks and justify program investment

Why use a simulator instead of simply hiring a consultant for a full program review? Both are valuable, and they serve different purposes. A simulator assessment is fast, free, and gives you an immediate picture of your program's structural health. It tells you whether you need urgent help or whether your program is fundamentally sound with specific areas to tune. A full third-party program review is deeper, more detailed, and produces a formal written findings report suitable for presentation to banking partners or regulators. Many businesses use the simulator first to identify whether they need a full review, then engage a consultant for the deep dive if the simulator reveals serious gaps. This approach saves time and money by focusing professional resources where they are actually needed.

Finding gaps before an examiner does is the most cost-effective compliance investment a business can make

The questions in the simulator are calibrated against real examination findings from FinCEN, the IRS, state regulators, and federal banking agencies. They reflect the standards examiners are applying today - not the standards from five years ago. This matters because AML examination standards evolve. A program that was compliant in 2020 may not satisfy current expectations for beneficial ownership verification, transaction monitoring calibration, or sanctions screening. The simulator is updated continuously to reflect current regulatory guidance, recent enforcement actions, and emerging examination priorities.

One of the most valuable outputs of the simulator is the industry-specific context it provides. The five-pillar framework is universal, but the way examiners apply it varies significantly by industry. An MSB faces different emphasis areas than a non-bank mortgage lender, which faces different emphasis areas than a real estate professional. The simulator asks about your business type at the outset and adjusts the weighting and guidance accordingly. A title company receives guidance tied to the FinCEN Residential Real Estate Rule and beneficial ownership requirements. An MSB receives guidance tied to CTR filing discipline and agent location oversight. This industry calibration makes the assessment far more relevant than a generic compliance checklist.

The simulator also functions as an educational tool for senior management and boards of directors who may not have deep familiarity with BSA technical requirements. The scored output and the plain-language explanations of each gap help non-compliance professionals understand why specific program elements matter and what the business risks are if those elements remain unaddressed. For compliance officers trying to secure budget or organizational support for program improvements, a simulator report can be a powerful piece of evidence. It transforms abstract regulatory requirements into concrete, scored deficiencies with clear remediation paths.

If your simulator score lands in the Examination Risk band, the immediate priority is to stop the bleeding. The three highest-impact fixes are: first, confirm that your BSA compliance officer has actual authority, actual time, and actual training - not just a title on an org chart; second, schedule independent testing within the next 90 days if it has been more than 12 months since your last review; and third, ensure your customer identification procedures include actual verification steps with documented evidence. These three fixes address the deficiencies most likely to generate immediate enforcement action, and they are within reach of most businesses within a single quarter.

If your score lands in the Needs Improvement band, your remediation strategy should be systematic rather than panic-driven. Update your risk assessment first - every other program element is built on top of it, and an outdated risk assessment undermines the credibility of your entire program. Then refresh your training curriculum to make it role-specific, with content tailored to the actual responsibilities of each employee category and documented with variable certificates that name the course content, compliance year, and employee role. Finally, review your transaction monitoring procedures to confirm they are actually being followed at the operational level, not just documented in a policy binder. These three actions will move most Needs Improvement programs significantly closer to Exam Ready status.

If your score is Exam Ready, your focus should shift from remediation to maintenance. Schedule your next independent testing before the current cycle expires. Build a recurring training calendar that keeps every employee current without last-minute scrambles. Review your risk assessment quarterly for material changes in your business, customer mix, or regulatory environment. And document everything - the training sessions, the monitoring reviews, the policy updates, the management reporting. An Exam Ready program that cannot produce documentation on demand becomes a Needs Improvement program the moment an examiner asks to see the records.

The bottom line is simple: finding your gaps before an examiner finds them is the single most cost-effective compliance investment you can make. The BSA/AML Audit Simulator makes that discovery free, fast, and specific. Whether you are building your first AML program, maintaining an established one, or recovering from an examination finding, the simulator gives you a clear picture of where you stand and what to do next. Take the assessment. Fix what it finds. Sleep better knowing your program is ready.