Firms can decide which areas of their business are at risk of money laundering and put measures in place using what is known as ‘risk-based’ approach.