Financial crime risk governance in Nigeria is overdue for a structural evolution.
While banks and fintechs deliver near‑instant payments, Nigeria’s approach to financial crime especially ownership and accountability remains rooted in outdated models that inhibit true risk control and create silos. Here’s why and how programmes must be rewired to match the complexity and velocity of modern financial services.
The Problem: Outsourced Risk and Siloed Governance
Most Nigerian institutions still treat financial crime risk as something the second line (compliance/risk teams) owns and manages alone. That assumption undermines accountability and blurs responsibility. Instead of being embedded in business operations, financial crime controls are treated as standalone tasks that are monitored after the fact leading to superficial coverage and poor outcomes.
Global Shift: Embedding Controls in the First Line
In more advanced markets such as the UK, Singapore, and the United States key financial crime functions have shifted into the first line of defense (1LR):
- Transaction monitoring
- Screening
- Customer due diligence
- Fraud controls
In this model, business units, operations, and product teams take ownership of risk at the source while compliance remains an independent advisor (second line — 2LR) and audit provides independent assurance (third line — 3LR).
This approach:
- Aligns risk ownership with those who create and influence it.
- Encourages dynamic risk management embedded in daily activities.
- Distributes accountability across roles.
The Evolution of Governance Models
Historically, the Three Lines of Defense model placed compliance and risk in centralized functions outside business operations. However, research and practice have evolved toward more fluid models:
- 4LR — External auditors bridging internal controls and regulators
- 5LR — Explicit board ownership of financial crime risk
These models recognize that risks cannot be “delegated away” but must be owned by those who create them and monitored by independent assurance.
What’s Broken in Nigeria Today
In many Nigerian institutions:
- Financial crime risk remains strictly in 2LR.
- Entity‑wide risk assessments are absent or superficial.
- Compliance teams often perform dual roles (ownership + oversight), creating conflicts and inefficiencies.
As a result:
- Risk is monitored after the fact.
- Systems and controls are retrofitted instead of engineered in.
- Execution is shallow and reactive instead of proactive.
A Better Model: Multi‑Line Roles Framework
To build effective financial crime governance, institutions can evolve to:
🔹 1LR — Financial Crime Operations (Business/COO)
Under the Chief Operating Officer (COO) or Head of Operations:
- Detect and prevent financial crime daily.
- Own customer identification, transaction monitoring, screening, and fraud controls.
- Ensure risks are reduced to acceptable levels through built‑in controls.
🔹 1.5LR — Embedded Compliance
Compliance expertise is integrated directly into business units such as:
- Product compliance
- Business risk teams
This helps design controls in rather than bolt them on.
🔹 2LR — Compliance Oversight (CCO/CRO)
The Chief Compliance Officer (CCO) or Chief Risk Officer (CRO):
- Provides independent challenge
- Escalates risks when residual exposure exceeds appetite
- Advises on policies and control enhancements.
🔹 3LR and 4LR — Assurance
- 3LR (Internal Audit) provides independent internal assurance.
- 4LR (External Assurance) adds credibility through benchmarking and external review.
Together, they ensure governance frameworks stay robust and resilient.
Three Key Benefits of This Approach
- Compliance Becomes an Enabler
Compliance shifts from being seen as a blocker to a partner in risk management and product delivery. - Clear Accountability
Risk sits with the functions that create it, and oversight remains independent — preserving challenge and objectivity. - Stronger Resourcing and Focus
With dual accountability, budgets and staffing for risk functions become more adequate, balanced between operations and compliance.
Fixing Line Role Confusion
Misplaced ownership also creates friction. Compliance teams often become scapegoats for failures that actually stem from first‑line operations. Rebalancing governance helps compliance focus on advisory and challenge, while first‑line teams handle day‑to‑day risk execution.
The Path to Future‑Ready Governance
To modernize financial crime programmes in Nigeria, institutions must:
- Embed risk ownership in the first line
- Integrate compliance into core business processes
- Strengthen independent assurance layers
- Elevate governance to board roles
- Match organizational structure with how risks actually occur
Conclusion
Nigeria’s financial crime framework has remained static while risks have grown more complex. To be truly future‑ready, governance models must evolve from siloed, second‑line ownership toward multi‑line accountability where risk is owned at source, compliance plays a strategic advisory role, and assurance functions provide objective oversight.
Key takeaway: Embed ownership, expand breadth, enforce accountability and elevate governance.