US OFAC Sanctions Compliance Framework TA.II: Use testing procedures matched to the SCP's sophistication that assess risk assessment and controls objectively

What does TA.II require?

Testing and auditing II: testing or audit procedures fit the level and sophistication of the SCP and, internal or external, give a comprehensive and objective assessment of the OFAC risk assessment and internal controls, at element or enterprise level.