Which pillar is conducted by the internal audit department, outside auditors, consultants, or other independent parties?

• A. Internal Controls
• B. Independent Testing
• C. Training
• D. Customer Due Diligence

Answer: (B)

Independent testing is the practice of evaluating the effectiveness of AML controls through objective assessment by people who are not involved in creating or operating them. This unique perspective comes from internal audit, external auditors, consultants, or other independent parties, which helps ensure the evaluation is unbiased and evidence-based. By testing areas such as the customer due diligence process, transaction monitoring, suspicious activity reporting, and governance oversight, independent testers verify that policies are not only well designed but actually functioning in practice. This objective verification is what makes independent testing the pillar that reflects outside or third‑party oversight.

In contrast, internal controls refer to the policies and processes the organization itself puts in place to prevent or detect AML risk. Training focuses on educating staff about AML requirements and how to apply them in their daily work. Customer due diligence is the ongoing process of collecting and validating information about customers to assess risk. While all of these are essential, the specific role of independent testing is to provide an outside, impartial assessment of whether the controls are effective, which is why it’s conducted by the internal audit function or other independent parties.