An auditor is writing the scope for an AML review of a financial institution. The objective is to evaluate how effectively existing controls are designed and operating.
Which areas should be assessed? (Choose two.)