The OFAC regulations do not require anything - really - other than an absolute prohibition to allow transactions involving blocked parties. How you do that is supposed to be up to your institution, but if you fail to block a transaction, you could be in big trouble if it's determined that your policies and procedures were inadequate.
Having said that, I'm not sure how a hard copy of the ever changing-many paged-small font list would be add any adequacy to anyone's policy or procedure.
_________________________
CRCM,CAMS
Regulations are a poor substitute for ethics.
Just sayin'