This document discusses the risk-based approach for managing ML/TF risks in the financial services industry. It explores the new ML/TF risks that might arise for a small regional Australian bank that introduces an online banking capability. It also discusses the possible changes to the financial services industry that may increase ML/TF risk and necessitate changes to controls. The document suggests various controls that can be implemented to manage the risks.