This is a vexing question and it is at the heart of myriad problems with the current approach to AML/BSA processing. Last year, in conversation with a banking regulator, he observed, that "when a bank buys AML software they also buy an AML business process".