A firm must have effective measures in place to ensure that there is internal and external reporting whenever money laundering or terrorism financing is known or suspected.