Another good practice is to be involved in changes to products, services, or hardware. I instituted a review level for changes to existing operations: The champion of the new application must document the impact on AML monitoing and reporting and have the AML Department review and sign of on it. A little bureaucratic, but hey - documentation saves!!
_________________________
Caveat Lector! The opinions expressed in this post are those of FBH and no other, not even my employer!