According to the ACAMS Study Guide, an effective AML program should include four key elements: internal controls, independent testing, designated compliance officer, and training1. Internal controls are policies, procedures, and processes that help prevent, detect, and report money laundering and terrorist financing activities. One of the essential components of internal controls is customer due diligence (CDD), which involves identifying and verifying the customer, understanding the nature and purpose of the customer relationship, and conducting ongoing monitoring of customer transactions and risk profiles2. Ongoing monitoring is crucial for detecting and reporting suspicious activities, updating customer information, and reassessing customer risk ratings3.
In this case, the bank's written AML program does not address monitoring of customer account activity, which is a significant gap in its internal controls. The bank serves high-income, high net-worth clients who include non-residents and offshore businesses, which are considered high-risk customers for AML purposes4. The bank should have enhanced due diligence (EDD) measures for these customers, such as obtaining additional information, conducting more frequent reviews, and applying stricter transaction limits5. The fact that the consultant and the bank have mutual clients does not affect the risk rating or the due diligence requirements of those customers. Therefore, the consultant should recommend the bank to revise its procedures to better assess ongoing customer activity and comply with the AML standards.
References:
1: ACAMS Study Guide, Chapter 2: Developing an Effective Anti-Money Laundering Program
2: ACAMS Study Guide, Chapter 3: Conducting Customer Due Diligence
3: ACAMS Study Guide, Chapter 4: Ongoing Monitoring and Suspicious Activity Reporting
4: ACAMS Study Guide, Chapter 5: Identifying High-Risk Customers
5: ACAMS Study Guide, Chapter 6: Applying Enhanced Due Diligence Measures

The main objective when a financial institution (FI) conducts an investigation is to track the movement of the money. Money laundering is a process of disguising the proceeds of criminal activity to make them appear legitimate. The movement of money is an essential element in the process of money laundering. Therefore, tracking the movement of funds is a crucial step in identifying and preventing money laundering. A financial institution must be able to recognize suspicious transactions and report them to the relevant authorities. An investigation is conducted to gather evidence and establish a clear understanding of the transaction flow, the parties involved, and the nature of the activity. This information is used to determine if the transaction is suspicious and if it violates any laws or regulations.
While keeping policies and procedures updated, keeping documentation, and knowing the customer are essential components of a comprehensive anti-money laundering (AML) program, these activities are not the primary objective of an investigation. Policies and procedures need to be updated to reflect changes in regulatory requirements and emerging money laundering risks. Documentation must be retained to provide evidence of the investigation process and outcomes. Knowing the customer is essential to identify and verify the customer's identity and assess the risk associated with the relationship.
References:
ACAMS Study Guide for the CAMS Certification Examination - 6th Edition, Chapter 3: AML Programs, Section 3.2: AML Program Components, Subsection 3.2.4: Transaction Monitoring and Investigation, pp. 87-88 Main Objective of Conducting Investigations - exam-answer.com

A bank's risk assessment is a process of identifying, measuring, and mitigating the potential risks that the bank faces in its operations, products, services, and customers. According to the ACAMS Study Guide, a bank should focus on the following areas when performing a risk assessment1:
The type and location of the institution's clients. This involves analyzing the customer base, the types of accounts and transactions, the source and destination of funds, the level of due diligence and verification, and the risk profile of the customers. For example, a bank should consider whether its customers are individuals or entities, domestic or foreign, politically exposed persons, high-net-worth individuals, non-profit organizations, or cash-intensive businesses. The location of the customers may also indicate the level of exposure to money laundering, terrorist financing, sanctions, or tax evasion risks.
The nature and breadth of the services and products the institution provides. This involves evaluating the range and complexity of the products and services offered by the bank, the delivery channels, the payment methods, and the innovation and technology involved. For example, a bank should consider whether it offers wire transfers, correspondent banking, trade finance, private banking, trust and fiduciary services, prepaid cards, mobile banking, or cryptocurrency services. The nature and breadth of the services and products may also affect the level of transparency, traceability, and compliance of the transactions.
The geographic locations where the institution does business. This involves assessing the jurisdictions where the bank operates, where its customers reside, where its counterparties are located, and where the funds flow. For example, a bank should consider whether it has branches, subsidiaries, or affiliates in high-risk countries, whether it serves customers from high-risk countries, whether it engages in cross-border transactions, and whether it complies with the local laws and regulations of the countries where it does business. The geographic locations where the institution does business may also influence the level of exposure to political, legal, regulatory, or reputational risks.
References:
1: ACAMS Study Guide, Chapter 2: Risk Assessments, 1

The internal review would most likely recommend that the institution provide product-specific anti-money laundering training to all relevant employees, not just actuaries. This is because life insurance products can be used for money laundering purposes, such as purchasing policies with illicit funds, surrendering policies for cash value, or using policies as collateral for loans. Therefore, all employees who are involved in selling, servicing, or processing life insurance products should be aware of the money laundering risks and red flags associated with these products, and how to report any suspicious activity. The institution should also ensure that the training is timely, effective, and tailored to the specific roles and responsibilities of the employees.
The other options are not as relevant or appropriate as the correct answer. Option A is too broad, as not all staff need to be trained on anti-money laundering, only those who are relevant to the institution's business activities and exposure to money laundering risks. Option C is too narrow, as it only focuses on actuaries and does not address the need for training other employees who may deal with life insurance products. Option D is not sufficient, as e-learning alone may not be effective in ensuring that employees understand and retain the anti-money laundering content, and the institution should also conduct follow-up assessments to measure the impact and outcomes of the training.
References:
ACAMS Study Guide for the CAMS Certification Examination - 6th Edition, Chapter 3: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), page
57.
ACAMS CAMS Certification Video Training Course, Module 3: Compliance Standards for Anti-Money Laundering (AML) and Combating the Financing of Terrorism (CFT), Lesson 3.5: Training and Testing.
Best Practices for Anti-Money Laundering Compliance - DIRO Original, Section 3: Adequate Training.