49. Supervisors' understanding of ML/TF risks should be formed based on the analysis of all relevant qualitative and quantitative information. This may include prudential and conduct information already held by the supervisors including regulatory and supervisory records, information gathered through surveys or periodic off-site reporting records of past supervisory activities, AML/CFT supervisory returns, information shared by other domestic or foreign competent authorities including the FIU and LEAs on the usefulness of the entity's AML/CFT outputs, and open source information. See Box 2.3 for a list of possible information sources.

50. In their efforts to assess and understand ML/TF risks, supervisors may take into account risk assessments conducted by the supervised/monitored entities themselves but supervisors should always maintain an independent view instead of unduly relying on the entity's own risk assessments.