
Ultimate access to all questions.
A regional bank follows the three lines of defense approach for managing its operational risk. The CRO of the bank is concerned that several competing banks have recently received regulatory fines resulting from poor management of risks related to money laundering and financing of terrorism (ML/FT), and wants to improve the bank's management of these risks. The CRO reviews the Basel Committee guidelines for the management of ML/FT risks and suggests that the bank adopt industry best practices for different business functions in each line of defense. Which of the following would be most appropriate for the CRO to recommend addressing ML/FT risks?
A
The chief officer in charge of ML/FT risk should be responsible for monitoring and managing these risks within each of the business lines on a daily basis.
B
The CRO should serve as the primary point of contact with regulatory supervisors and financial intelligence units on any issues related to ML/FT risk.
C
Internal and external auditors should evaluate the bank's risk controls to ensure that they are effective in managing ML/FT risk as well as compliant with regulations.
D
The corporate operational risk function should screen current and prospective employees as part of the second line of defense in managing ML/FT risk.