1. (a) For purposes of this Part, the required anti-money laundering program shall, at a minimum:

   1. (1) provide for a system of internal controls to assure ongoing compliance;
   2. (2) provide for independent testing for compliance to be conducted by bank personnel or by an outside party;
   3. (3) designate an individual or individuals responsible for coordinating and monitoring day-to-day compliance; and
   4. (4) provide training for appropriate personnel.
2. (b) The anti-money laundering program shall be in writing, approved by the institution's board of directors or equivalent body, and such approval shall be noted in the minutes of the board of directors or equivalent body.
3. (c) Every banking organization and every foreign banking corporation will also be required to demonstrate, as part of their anti-money laundering programs, a customer identification program that complies with the applicable Federal anti-money laundering laws and regulations referred to in section 116.1 of this Part.
4. (d) Every banking organization and every foreign banking corporation will further be required to demonstrate they have in place risk-based policies, procedures and practices to ensure, to the maximum extent practicable, that its transactions will comply with OFAC requirements.
5. (e) Every banking organization and every foreign banking corporation shall file SARs in accordance with applicable Federal law and regulations.
6. (f) Compliance with applicable Federal requirements shall constitute compliance with this Part.

Every banking organization and every foreign banking corporation, in order to guard against money laundering through their institutions, shall establish and maintain an anti-money laundering program that complies with applicable Federal anti-money laundering laws (31 U.S.C. chapter 53, subchapter II)^*, including the obligation to file suspicious activity reports ("SARs") (31 U.S.C. 5318[g])* and a customer identification program (31 U.S.C. 5318[l])*, and regulations promulgated by the United States Department of Treasury (12 CFR part 103.120)*, and, as appropriate, regulations of the Board of Governors of the Federal Reserve Board (12 CFR parts 208.63 and 211.24)*, the Federal Deposit Insurance Corporation (12 CFR part 326.8)* and the National Credit Union Administration (12 CFR part 748.2)*. In addition, when ordered, each such entity shall provide within 30 days a written report to the superintendent detailing the extent to which it has established such a program. Every banking organization and foreign banking corporation also shall comply with applicable regulations issued by the Office of Foreign Assets Control of the United States Department of the Treasury (“OFAC”) (31 CFR part 500 et. seq.)*.