In accordance with Financial Action Task Force (FATF) standards [1][2], when the minimum AML requirements of the host country where a financial institution (Fl) operates are less strict than those of the Fl's home country, the Fl is required to ensure that their branches and majority-owned subsidiaries in host countries implement the requirements of the home country, to the extent that host country laws and regulations permit. This means that the Fl should not impose more strict requirements on host country branches, disregarding if host country laws and regulation permit such action, and should not close down its operations in the host countries where minimum AML requirements are less strict than those of the home country. However, the Fl should always apply additional measures on their branches and majority-owned subsidiaries in host countries to manage the money laundering and terrorist financing risk overseas.

When onboarding a corporate customer, financial institutions must conduct due diligence to assess potential AML risks.
Option A (Correct): Understanding the nature of the business helps identify higher-risk industries (e.g., casinos, cryptocurrency exchanges, cash-intensive businesses).
Option D (Correct): Identifying senior managing officials and account signatories helps verify the true control and ownership of the company.
Option E (Correct): Jurisdictional risk assessment is key, especially if the company is from a FATF-listed high-risk country.
Why Other Options Are Incorrect:
Option B (Incorrect): The employment profiles of all employees are not relevant unless they have a direct role in financial transactions.
Option C (Incorrect): A company's banking history is not always relevant, unless there are red flags of prior financial crime involvement.
Best Practices for Corporate Customer Onboarding:
Verify beneficial ownership structures to detect potential shell companies.
Conduct enhanced due diligence (EDD) for high-risk industries and jurisdictions.
Ensure ongoing monitoring of corporate customers.
Reference:
FATF Recommendation 10 (Customer Due Diligence)
6th EU AML Directive (6AMLD) on Corporate Due Diligence
Wolfsberg Group Guidance on Corporate Customer AML Risk Management

program
Explanation:
The board of directors is ultimately responsible for ensuring that the financial institution has an effective anti-money laundering program that complies with the applicable laws and regulations. If the institution receives a regulatory enforcement action, the board should take prompt and corrective actions to address the deficiencies and mitigate the risks of further violations or penalties. One of the most important actions is to instruct the compliance officer to develop a plan to remediate the institution's anti-money laundering program, which should include a root cause analysis, a gap assessment, a timeline, and a budget. The board should also monitor the implementation and progress of the remediation plan, and communicate with the regulators on a regular basis.
The other options are not appropriate actions for the board of directors to take in response to a regulatory enforcement action. Terminating the compliance officer and staff may not solve the underlying issues of the anti-money laundering program, and may create more disruption and instability. Purchasing and installing a new suspicious activity monitoring system may not be necessary or sufficient to address the deficiencies, and may entail additional costs and challenges. Hiring an attorney to protest the enforcement action may not be in the best interest of the institution, and may antagonize the regulators and escalate the situation.
Reference:
CAMS Certification Package - 6th Edition | ACAMS, Chapter 5: Risk Management, Section 5.2: Regulatory Examinations and Enforcement Actions, pp. 171-174.
CAMS Certifications: How to Get CAMS Certified | ACAMS, CAMS Examination Preparation Guide, Section 3: Regulatory Compliance, pp. 23-24.

According to the CAMS Study Guide, the most commonly used risk criteria for assessing the money laundering and terrorist financing risks are country risk, customer risk, and product and service risk. These criteria are based on the FATF Recommendations and the Basel Committee's guidance on sound management of risks related to money laundering and financing of terrorism.
Country risk refers to the level of exposure to potential money laundering and terrorist financing activities in a specific jurisdiction, based on factors such as the quality of its AML/CFT regime, its level of corruption, its political and economic stability, its involvement in illicit activities, and its cooperation with international bodies.
Customer risk refers to the level of exposure to potential money laundering and terrorist financing activities associated with a specific customer or customer segment, based on factors such as the nature and purpose of the business relationship, the source and destination of funds, the type and volume of transactions, the customer's profile and behavior, and the customer's geographic location.
Product and service risk refers to the level of exposure to potential money laundering and terrorist financing activities associated with a specific product or service offered by a financial institution, based on factors such as the complexity, transparency, anonymity, and accessibility of the product or service, the delivery channels and payment methods used, and the degree of oversight and monitoring applied.
Reputation risk is not a risk criterion for assessing the money laundering and terrorist financing risks, but rather a potential consequence of failing to manage those risks effectively. Reputation risk refers to the potential damage to the public trust and confidence in a financial institution due to its involvement or association with money laundering and terrorist financing activities, whether directly or indirectly.
Reference:
CAMS Study Guide, 6th Edition, Chapter 2: Risk Assessments, pp. 41-461
FATF Recommendations, Recommendation 1: Assessing Risks and Applying a Risk-Based Approach2 Basel Committee on Banking Supervision, Sound management of risks related to money laundering and financing of terrorism, June 2017, pp. 9-143

The audit function should report to the audit committee of the board of directors (or similar oversight body) and independently evaluate the risk management and controls of the bank through periodic assessments, including the adequacy of the bank's controls to mitigate the identified risks, the effectiveness of the bank's staff's execution of the controls, the effectiveness of the compliance oversight and quality controls and the effectiveness of the training.