Exam CRCM topic 1 question 2 discussion

They also embrace the concept of risk-based compliance management. They expect compliance management to be tailored to the bank, be it large or small, offering standard or specialty financial services, simple or complex products lines, and adjusted as appropriate for the customer base as that issued for the Bank
Secrecy Act, also establishes their expectations that a bank's program be risk based. Who are they?