This Practice Note explains the regulatory requirement to implement systems and controls to mitigate and manage effectively the risks of money laundering, terrorist financing and proliferation financing as set out in the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLR 2017), SI 2017/692, as amended. Is it mandatory to implement systems and controls under the MLR 2017? If the MLR 2017 apply to your firm, you must: • establish and maintain policies, controls and procedures to mitigate and manage effectively the risks of money laundering, terrorist financing and proliferation financing identified in your firm-wide risk assessment (FWRA) • regularly review and update those policies, controls and procedures • maintain a written record of: ◦ those policies, controls and procedures—see Precedent: Register of AML, CTF and counter-proliferation financing policies, plans and procedures ◦ any changes to those policies, controls and procedures ◦ the steps taken to communicate those policies, controls and procedures or any changes to them within your firm For