An anti-money laundering specialist at a large institution is responsible for information senior management about the status of the anti-money laundering program across the organization. Which report is the most useful?

Reports from internal audits and external regulatory examinations provide senior management with an independent and comprehensive assessment of the AML program's design and operational effectiveness. These reports are crucial as they objectively identify control weaknesses, compliance gaps, and areas for improvement. By reviewing these findings, management gains a clear, evidence-based understanding of the program's overall status and can ensure that necessary corrective actions are implemented, fulfilling their oversight responsibilities.

A. This is a specific risk metric, not a holistic evaluation of the AML program's controls, policies, and procedures.
C. This information is operational and tactical; it does not provide a structured assessment of the program's overall health or compliance status.
D. This is an organizational update that may impact governance but does not report on the AML program's actual performance or effectiveness.

1. ACAMS CAMS6 Study Guide (6th ed.). Chapter 4, p. 213. The guide states, "The audit’s findings should be reported to the board of directors, or a committee of the board, and senior management... The report should describe the scope of the audit, the procedures performed, the findings, and the recommended corrective action." This directly supports that audit results are a primary tool for informing senior management.

2. Financial Action Task Force (FATF). International Standards on Combating Money Laundering and the Financing of Terrorism & Proliferation – The FATF Recommendations. (Updated March 2022). Interpretive Note to Recommendation 18, p. 79. The FATF standards mandate that financial institutions have "an independent audit function to test the system." The purpose of this function is to provide assurance on the effectiveness of the AML/CFT program, with its findings being a critical component of senior management's oversight.

3. The Wolfsberg Group. Statement on The Role of the Financial Crime Compliance Function. (June 2022). Section 3, "Key Responsibilities." The document outlines that a key responsibility of the Financial Crime Compliance (FCC) function is to provide "reporting to Senior Management and the Board... on the effectiveness of the FCC control framework." This reporting is heavily informed by the results of independent testing and audits.