Review of available documentation.
Review software tool functionalities and limitations.
Replicate AML rules/scenarios to evaluate their correct implementation.
Review historical data and perform data analysis.
Validation of the conceptual soundness.
Conduct adequate above-the-line and below-the-line testing for your system parameters and other settings.
Evaluate the optimisation and reasonableness of your risk rating module.