An AML audit is a review of anti-money laundering controls, records, and decision-making. It checks whether an organization is spotting suspicious activity, keeping required evidence, and following internal and regulatory procedures. Typical audit material includes transaction logs, alerts, case notes, customer due diligence files, and evidence of approvals or escalations.
In cyber security, AML audit data is sensitive because it can reveal how an organization monitors risk, who is being investigated, and what financial controls are in place. Attackers may steal or leak these files to pressure a victim, expose compliance weaknesses, or support fraud and social engineering. Defenders protect them with access controls, logging, encryption, retention rules, and segregation between compliance systems and general document stores.