Embedding Risk Into Strategy: Why Nigerian banks must lead with compliance

Kubi Momoh

By Kubi Momoh

Regulatory compliance is no longer a back-office obligation or a checklist exercise. In today’s financial landscape – marked by foreign exchange, FX, reforms, tighter supervisory scrutiny, and evolving global anti money laundering standards–compliance must sit at the heart of strategy. When compliance is treated as a strategic asset, it strengthens resilience, unlocks business opportunities, and builds trust with clients, counterparties, and regulators.

The Nigerian regulatory environment has changed rapidly and decisively over the past 20 years, keeping pace with global developments. Recent actions by the Central Bank of Nigeria (CBN) highlight this shift: from new customer due diligence rules to a risk-based cybersecurity approach, the focus is on governance, technology, and clear control systems.

The CBN’s 2023 Customer Due Diligence Rules and the 2024 Risk Based Cybersecurity Framework set out clear minimum standards for financial institutions to manage customer, Anti Money Laundering / Combating the Financing of Terrorism, AML/CFT, and cyber risks in a proportionate and proactive manner.

At the same time, broader financial sector reforms such as revised FX market guidelines and steps to regularize foreign exchange intermediation signal a policy intent to tighten market integrity while expanding legitimate market activity. Meanwhile, improvements in Nigeria’s AML/CFT technical compliance, as seen in recent Financial Action Task Force (FATF) follow up assessments, mean international counterparts increasingly expect demonstrable progress on controls and transparency.

These developments create both an imperative and an opportunity. As such, compliance is being reframed from a cost centre to a strategic enabler across four interlinked dimensions: governance, business design, technology, and partnerships.

First, governance. Boards and executive teams increasingly own compliance outcomes. This means integrating risk and compliance metrics into corporate scorecards, linking remuneration and performance evaluations to control outcomes, and ensuring independent challenges through a robust second line function. When board agendas include forward looking compliance scenarios—how a new regulation will affect product design, pricing, or cross border flows—decision makers incorporate compliance trade-offs into business strategy rather than retrofitting controls after launch.

Second, business design. Compliance should be a core consideration in product development and client segmentation. Trade finance, cross border payments, and custodial services carry unique regulatory touchpoints: enhanced CDD, documentary precision, sanctions screening, and counter party verification.

Structuring products with built in compliance—standardized KYC templates, automated sanctions screening points, and predefined documentation workflows—reduces processing friction and lowers the cost of compliance over time. It also expands addressable markets, as international corporates and correspondent banks prefer counterparties with predictable, auditable compliance frameworks.

Third, technology and data. Digital transformation is not simply a convenience; it is foundational for scalable compliance. Electronic KYC, API driven correspondent checks, real-time transaction monitoring, and machine learning models for anomaly detection enable institutions to move from reactive investigations to proactive prevention.

The CBN’s emphasis on a risk-based cybersecurity posture reinforces that security, controls, and compliance must be embedded in technology roadmaps—not added as an afterthought. Importantly, data governance underpins trust.

Clean, auditable data improves the quality of sanctions screening, risk scoring, and suspicious activity reporting.

Fourth, partnerships and public private instruments. Banks cannot carry all compliance risks alone. Structured risk-sharing with development finance institutions, export credit agencies, and multilateral partners unlock financing for clients while distributing political or cross border risk. Similarly, industry collaboration—through shared KYC utilities or consortium screening platforms—reduces duplication and raises the sector’s collective standards.

Embedding compliance into strategy produces measurable benefits. First, risk reduction: disciplined compliance limits exposure to fines, litigation, and operational losses.

Second, market access: strong controls are a prerequisite for correspondent relationships and international capital flows. Third, cost efficiency: automation reduces manual reviews and false positives, allowing skilled compliance professionals to focus on high value investigations. Finally, reputation: in a trust sensitive sector, demonstrable compliance becomes a competitive differentiator.

Operationalizing this strategic shift requires practical steps. Begin with a gap assessment that maps current controls against regulatory expectations and business ambitions. Develop a three-year roadmap aligning technology upgrades, policy revisions, staffing, and training. Prioritize automation in the highest risk processes—transaction monitoring, sanctions screening, and KYC onboarding—while retaining human oversight where nuanced judgment is required. Invest in continuous training to build a culture in which front line staff can identify suspicious signals and understand escalation pathways.

Regulators will continue to expect visible progress. While the FATF and regional bodies have acknowledged improvements in Nigeria’s AML/CFT regime, the country remains under continued follow up—meaning momentum must be sustained and clearly demonstrated.

The strategic integration of compliance also supports broader national objectives. As Nigeria pursues economic diversification, fintech growth, and increased cross border trade, stable and well-regulated banks will be critical enablers. Institutions that embed compliance at the core of their strategy will be better positioned to facilitate export finance, custody services, and cross border capital flows essential to economic growth.

In summary, compliance is not merely a defensive activity; when embedded in governance, product design, technology, and partnerships, it becomes a driver of opportunity. Nigerian banks that adopt this posture will not only meet regulatory expectations but will also unlock new markets, strengthen correspondent relationships, and enhance resilience to shocks.

The future of banking belongs to institutions that treat compliance not as a burden, but as strategic capital—mitigating risk while enabling growth. It is time for risk and compliance to move from the periphery to the boardroom agenda, where strategy is shaped and long-term value is created.

At FSDH Merchant Bank, this philosophy is operational. The Bank remains firmly committed to embedding risk management and compliance at the core of its strategy, governance structures, and business processes. By investing consistently in robust controls, skilled people, and enabling technology, FSDH continues to align its growth ambitions with the highest regulatory and ethical standards.

• Kubi Momoh is the Executive Director, Risk Management & Compliance, FSDH.

Join Our Channels