Skip to main content

#risk-assessment

Risk Assessment

Assess financial risks and implement mitigation strategies

FinCEN Delayed the Investment Adviser AML Rule to 2028. The Clock Is Still Running.

FinCEN moved the investment adviser AML rule's effective date from January 1, 2026 to January 1, 2028, covering roughly 20,000 SEC-registered advisers and exempt reporting advisers. Here's what the rule requires — SARs at $5,000, CTRs above $10,000, travel-rule recordkeeping at $3,000 — and a 24-month plan to build the program before the deadline.

FDIC Coverage for Business Accounts: Lessons from the Small Business Bank Failure in Lenexa, Kansas

On July 18, 2026, regulators closed Small Business Bank of Lenexa, Kansas — the fourth U.S. bank failure of 2026 — with $73M in assets and $69M in deposits assumed by Farmers State Bank of Oakley. Here's how the $250,000-per-depositor, per-ownership-category FDIC limit really applies to business accounts, and how to extend coverage with multiple banks or insured cash sweeps.

Aerial Arts and Circus Studio Bookkeeping: Deferred Revenue, Rig Depreciation, and the $1M/$3M Insurance Floor

Aerial and circus studios typically must carry $1M-per-occurrence/$3M-aggregate liability coverage — far above a standard fitness studio — and that floor reshapes their books. How to record punch cards as deferred revenue, depreciate silks and rigging on safety schedules, classify instructors, and reserve for insurance deductibles.

Indiana, Kentucky, and Rhode Island Privacy Laws Took Effect in 2026: What Small Businesses Need to Know

On January 1, 2026, Indiana, Kentucky, and Rhode Island became the 18th, 19th, and 20th states with comprehensive consumer privacy laws. This guide compares their applicability thresholds (as low as 10,000 consumers in Rhode Island), cure periods, penalties up to $10,000 per violation, and gives small businesses a six-step compliance checklist.

Missouri's HB 974 Insurance Data Security Law: What Small Agencies Must Do Before January 1, 2026

Missouri's HB 974, signed July 2, 2025 and effective January 1, 2026, applies the NAIC Insurance Data Security Model Law to nearly every insurance licensee in the state — requiring a written security program, annual risk assessments, an incident response plan, vendor oversight, and breach notification to regulators within four business days.

PCAOB Bars Zwick CPA Over Fabricated Genie Energy Workpapers: What Audit Quality Failures Mean for Small Businesses

The PCAOB revoked Zwick CPA's registration and fined the firm $50,000 after finding its 2022 Genie Energy audit relied on the predecessor auditor's recycled workpapers with swapped names and fabricated documentation. With 61% aggregate deficiency rates at triennially inspected firms, here's how small businesses can vet the audits they rely on — and keep their own books diligence-ready.