An organization is developing a comprehensive anti-money laundering (AML) framework.Which of the following statements best describes the relationship between AML policies and procedures?