An organization is developing a comprehensive anti-money laundering (AML) framework. Which of the following statements best describes the relationship between AML policies and procedures?

This choice inverts the correct relationship - policies are high-level statements of principle, not detailed instructions; it is procedures that provide the granular, step-by-step operational guidance.

While the first sentence correctly defines policies as broad guidelines and procedures as detailed instructions, this answer is incomplete or misleading in its full statement and fails to capture the critical directional relationship that policies influence and drive the creation of procedures.

This choice again reverses the definitions, incorrectly describing policies as detailed instructions and procedures as an overarching framework, which is the opposite of how these two elements function in any AML compliance program.

Policies establish the 'what' and 'why' of an organization's compliance stance by defining its core principles, risk appetite, and values. Those principles directly drive and inform the drafting of procedures, which specify the 'how' - the concrete, step-by-step actions employees must take to put those principles into practice.