All of the following statements about an insurance company's anti-money laundering program are correct EXCEPT the program must ________?
1) Have a designated compliance officer
2) Conduct ongoing employee training
3) Maintain customer due diligence procedures
4) Report suspicious activity to the authorities