ACAMS Updated CAMS Exam Questions and Answers by wilbur

According to the Anti-Money Laundering Specialist (the 6th edition) by ACAMS, an institution’s anti-money laundering program should be reassessed at least annually to ensure that it is current, effective, and compliant with the applicable laws and regulations. The reassessment should include a review of the institution’s risk assessment, policies and procedures, internal controls, training, and independent testing. The reassessment should also consider any changes in the institution’s products, services, customers, geographic locations, or business environment that may affect its exposure to money laundering and terrorist financing risks1.

The other options are not consistent with the best practices of maintaining an up-to-date anti-money laundering program. For example:

The program should be evaluated and updated at least every six months by the Board of Directors. While the Board of Directors has the ultimate responsibility for overseeing the institution’s anti-money laundering program, it is not required to evaluate and update the program every six months. This may be too frequent and impractical, especially for large and complex institutions. The Board of Directors should, however, approve the program and any significant changes, and ensure that senior management implements and enforces the program effectively1.

The program should be reviewed by a federal law enforcement officer for gaps in controls. While federal law enforcement agencies may conduct investigations or examinations of the institution’s anti-money laundering program, they are not responsible for reviewing the program for gaps in controls. This is the role of the institution’s internal audit function or an external independent party, who should conduct periodic testing of the program’s adequacy and effectiveness1.

The program should be sent to the institution’s government regulator on a periodic basis. While the institution’s government regulator may request or review the institution’s anti-money laundering program as part of its supervisory or enforcement activities, the institution is not obligated to send the program to the regulator on a periodic basis. The institution should, however, report any suspicious or unusual transactions or activities to the relevant authorities, such as the Financial Crimes Enforcement Network (FinCEN) or the Office of Foreign Assets Control (OFAC)1.

References:

Anti-Money Laundering Specialist (the 6th edition) by ACAMS

 The compliance officer should provide a high level summary of the activity and the interactions with law enforcement to the board of directors, as this would be the most appropriate way to escalate the information without compromising the confidentiality of the STR or the ongoing investigation. Providing a copy of the STR or the letter from law enforcement could expose the bank to legal risks or jeopardize the investigation. Informing the regulator to bring it up with the board would not be sufficient, as the compliance officer has the responsibility to report directly to the board on significant compliance issues.

References:

ACAMS CAMS Certification Video Training Course, Module 5: Risk Management, Lesson 5.3: Reporting to Senior Management and the Board1

ACAMS CAMS Certification Study Guide, 6th Edition, Chapter 5: Risk Management, Section 5.3: Reporting to Senior Management and the Board2

As part of its enforcement efforts, OFAC publishes a list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So it's covering all

In many jurisdictions, it is a requirement to report certain information regarding STRs to senior management and/or the board of directors. This information may be limited to the number of reports filed, the dollar amounts involved and significant trends as observed by compliance personnel. In some cases, if the activity presents a significant or potentially ongoing risk to the institution, the leaders of the institution should be made aware so that high-level decisions can be made regarding potential changes to systems, staffing, products, services or particular relationships maintained by the institution.

Banks are required by the SAR regulations of their federal banking agency to notify the board of directors or an appropriate board committee that SARs have been filed. However, the regulations do not mandate a particular notification format and banks should have flexibility in structuring their format. Therefore, banks may, but are not required to, provide actual copies of SARs to the board of directors or a board committee. Alternatively, banks may opt to provide summaries, tables of SARs filed for specific violation types, or other forms of notification. Regardless of the notification format used by the bank, management should provide sufficient information on its SAR filings to the board of directors or an appropriate committee in order to fulfill its fiduciary duties, while being mindful of the confidential nature of the SAR. https://bsaaml.ffiec.gov/manual/AssessingComplianceWithBSARegulatoryRequirem ents/0