The AML officer should set in motion the firm’s policy about AML, CFT, and KYC and report suspicious transactions to the regulatory body.