We start from local regulatory requirements and draw on international standards where they help.
The first question is always what the regulator asks of you specifically. Then we build what is needed to meet it in the simplest way possible.
International standards such as the FATF recommendations and ISO frameworks are a useful reference for comparison and improvement. We use them to raise quality, and do not impose them where nobody asks for them.