The compliance and audit function of the FI should regularly review the AML/CFT systems, e.g. sample testing, (in particular, the system for recognizing and reporting suspicious transactions) to ensure effectiveness. The frequency and extent of the review should be commensurate with the risks of ML/TF and the size of the FI‟s business. Where appropriate, the FI should seek a review from external sources.