(b) At a minimum, each compliance program shall provide for:

1. (1) A system of internal controls to ensure ongoing compliance;
2. (2) Internal and/or external independent testing for compliance;
3. (3) Training of franchise holder personnel, including training in the identification of unusual or suspicious transactions, to the extent that the reporting of such transactions is required by applicable law or regulation, or by the franchise holder’s own administrative and compliance policies;
4. (4) An individual or individuals to ensure day-to-day compliance;

5. (5) Procedures for using all available information to determine:

   1. (A) When required by this section, the name, address, social security number, and other information, and verification of same, of a person;
   2. (B) When required by this section, the occurrence of unusual or suspicious transactions; and
   3. (C) Whether any record must be made and retained.