Each bank's Customer Identification Program $($CIP$)$ must be approved by the bank's board of directors and integrated into the bank's Bank Secrecy Act $($BSA$)/$anti$-$money laundering $($AML$)$ compliance program. What third requirement exists for a bank's CIP?

Select the correct answer and click Submit.

A$.$ It must be entirely risk based

B$.$ It must be in writing

C$.$ It must be posted on the bank's website

D$.$ It must be updated annually