FinCEN Assesses $1.2 Billion Penalty against Bank of America

FinCEN's enforcement reveals that Bank of America detected priority national security risks but failed to mitigate or report them—a breakdown not of detection technology but of decision capture. Each time an alert fired and a human analyst or BSA Officer chose not to escalate, a decision record should have been produced: who decided, why, what evidence supported the conclusion, and what outcome was expected. Without that contemporaneous artifact, the regulator found a pattern of inaction with no audit trail to justify it. Decision Governance demands that every determination to file or not file a SAR, to escalate or dismiss an alert, be logged as a system of record at the moment of the decision—so the rationale is examinable when scrutiny arrives years later.