What is the annual independent AML test, and who can perform it?
Independent testing is one of the four pillars every Bank Secrecy Act AML program has carried since the concept began covering banks and broker-dealers, and it is the pillar with the clearest recurring cost attached (see the cost breakdown above).
What "independent" means here
The rule does not require the tester to hold any specific certification or credential. Its requirement is narrower and more practical: whoever performs the test has to be independent of the function being tested, meaning not the person who designed your AML program or who runs it day to day. An adviser's own compliance officer testing their own program does not meet that bar.
In-house or outside, either can work
Independence is about the relationship to the function, not about being external to the firm. A sufficiently separate employee, someone with no role in building or running the AML program, can perform the test internally at a firm large enough to have that separation. A small firm where the same one or two people touch everything typically has to look outside: an outside compliance consultant or law firm with no role in the program's day-to-day operation.
How often, and what it costs
The test is not a one-time deliverable. It repeats on a recurring, annual basis for as long as the firm stays in scope, and FinCEN's own estimate puts the average cost at roughly $17,000 a year (89 FR 72156, regulatory impact analysis, pp. 72229 to 72230, September 4, 2024). That number is separate from, and in addition to, the roughly 120 hours FinCEN estimated to build the underlying program in the first place.
This page is independent research, not legal advice. It quotes FinCEN's own rulemaking with pinpoint citations. Verify anything load-bearing against the Federal Register text itself before acting on it.