Customer due diligence procedures are structured around the transactional risk a business actually carries, not a generic checklist. Each file records what was verified, when, and against which source, so the reasoning behind a decision can be reconstructed later.