Regulatory exams assess whether financial institutions comply with AML/CFT laws and have adequately addressed previous deficiencies.

Option C (Correct):Regulators may still issue remediation orders if the bank's improvements do not fully resolve prior AML compliance gaps.

Option D (Correct):If deficiencies persist, regulators may impose civil or criminal penalties.

Why Other Options Are Incorrect:

Option A (Incorrect):Secondary sanctions typically apply to institutions violating international sanctions laws, not AML program deficiencies.

Option B (Incorrect):Regulatory orders are not always confidential—major enforcement actions may be publicly disclosed.

Option E (Incorrect):Boards are responsible for AML oversight but are not always required to disclose corrective actions publicly.

Best Practices for Addressing AML Exam Findings:

Document all remediation efforts with clear implementation timelines.

Demonstrate a culture of compliance through leadership and training.

Ensure sustained improvements, not just short-term fixes.