How often must the UAE update its National Risk Assessment?
Under the Executive Regulations, the UAE updates its National Risk Assessment and National Anti-Crime Strategy at least once every three years, or whenever circumstances make an earlier update necessary. This keeps the national picture current as threats, sectors and typologies evolve, and allows the authorities to respond to new risks such as virtual assets or changing trade patterns.
For regulated firms, the three-year cycle is a useful marker. When a new assessment is published, firms should review it promptly and refresh their own risk assessments and controls to reflect any changes in the national threat picture. Waiting for an internal review date is not enough if the national assessment has moved on.
Legal Reference (UAE):
· Cabinet Resolution No. 134 of 2025 (Executive Regulations), Article 48(2): the National Risk Assessment and National Anti-Crime Strategy are updated at least once every three years, or whenever necessary.
· NAMLCFTC: publishes the updated national assessment.
For more details, consult the full text of the Executive Regulations or seek guidance from your AML compliance officer.