In the UAE, having policies isn’t enough. Regulators and auditors now test operational effectiveness and evidence trails under the UAE AML law and its Implementing Regulations, and inside the DIFC (Dubai International Financial Centre) under the regulator's DFSA rulebooks. If you can’t produce verifiable artefacts quickly (logs, registers, approvals, testing results), you don’t have a control environment; you have a document folder. Why evidence is the new battleground Stat
