systems and internal controls designed to comply with applicable sanctions; (ii) a designated person responsible for the day-to-day implementation and operation of the program; (iii) independent testing; (iv) an ongoing training program; and (v) reporting and record keeping.