Which of the following is NOT classified as Customer information Breach? 

Which party is NOT to be reported to upon Customer Information Breach?

Report to an enforcement agency e.g. PDRM has to be made should fraud element is involved in the Customer Information Breach cases.

Who should be responsible to safeguard the customer information from any thief, misuse and unauthorised modification?

Customer's information is referred to as:

"Any information relating to the affairs or, in particular, the account, of any particular customer of the bank in whatever form including in the form of a record, book, register, correspondence, other document or material."

Any person in relation to the customer, i.e. spouse, parents, children etc. are the persons to whom the customer’s documents or information may be disclosed with.

Exerting undue pressure or influence on any customer to acquire the Bank's products or services is considered as FAIR treatment to the customer.

Staff who handles the customer information is considered to have UNUSUAL BEHAVIOUR should the staff:

(i) has access to customers’ information in the system;

(ii) have unique passwords;

(iii) changes the password frequently;

(iv) does not share the password; and

(v) does not expose the password out in the open.

All personal data must be processed in accordance with the principle set out in PDPA.

What are the potential consequences for non-compliance with AML requirements for both financial institutions and individuals?

The followings are the list of whom to conduct name screening via Bankers Accuity platform EXCEPT:

In the event that the financing application involves of Royalty and Active ADUN, RM shall obtain approval from _____.

Which of the following business description is NOT considered as high-risk business?

Submission of Suspicious Transaction Report (STR) shall be submitted to BNM by AML/CFT.

For customer screening via Bankers Accuity, the screening must be conducted by searching their _____.

Below are the required information for the identification of Beneficial Owner(s), EXCEPT:

Which of the following is NOT subjected to Enhanced Due Diligence (EDD):

The staff who has the knowledge of the Suspicious Transaction Report (STR) should preserve secrecy and should not inform the customer or anyone else.

Below are the list of Non-Cooperative Countries and Territories (NCCT) issued by Financial Action Task Force (FATF) dated 31 March 2022, EXCEPT:

Shariah Non-Compliant in Islamic finance is the risk that arises from the Bank’s failure to comply with the Shariah rules and principles determined by the regulator.

Based on Shariah Governance Policy Document of BNM, which Shariah functions are required to be established by Islamic financial institutions?

i. Secretariat to the Shariah committee

ii. Shariah Review function

iii. Shariah Risk function

iv. Shariah Audit function

The customers are allowed to take up conventional insurance coverage for CMTF-i product should the premium is borne by the customers.

The customers are given the flexibility to take up conventional insurance coverage for ijarah based financing under the following circumstances EXCEPT:

Financing facility may be granted to customer with mixed business activities, provided that the Shariah non-compliance income derived from such business does not exceed 5% of the total income.

Whistleblowing is an act to promote the disclosure of information about any corruption or other misconduct.

The Whistleblowers Protection Act 2010 will provide protection to whistleblowers from any act prejudicial effect of disclosure has been made.

Dissatisfy with the performance KPI rating given by superior can be reported under whistleblowing.

Whistleblowers may withdraw the disclosure.

Whistleblowers may choose to remain anonymous however it may limit the investigation.