Section 352 of the USA PATRIOT Act requires U.S. financial institutions to establish an anti-money laundering (AML) program that includes, at a minimum, four key pillars. These pillars are foundational to modern AML compliance frameworks. Option D, "The development of internal policies, procedures, and controls," is a direct and accurate statement of the first of these four pillars. These controls are the documented rules and processes that guide an institution's AML efforts.

A. Talent and performance management is a human resources function, not one of the four legally mandated AML pillars.

B. The audit function must be independent to ensure objective assessment of the AML program; a "dependent" function would be a violation.

C. Risk metrics and thresholds are a component of internal controls but are not considered a standalone pillar of the program.

1. ACAMS. (2022). Certified Anti-Money Laundering Specialist (CAMS) Study Guide. Chapter 1: Money Laundering Risks and Methods. The guide explicitly lists the four pillars required by the USA PATRIOT Act.

2. USA PATRIOT Act of 2001, Pub. L. 107-56, Title III, Section 352. This section amends the Bank Secrecy Act (31 U.S.C. 5318(h)(1)) to mandate AML programs that include "(A) the development of internal policies, procedures, and controls; (B) the designation of a compliance officer; (C) an ongoing employee training program; and (D) an independent audit function to test programs."

3. Financial Crimes Enforcement Network (FinCEN). (2020). FFIEC Bank Secrecy Act/Anti-Money Laundering Examination Manual. Section: "AML Compliance Program Structure." This manual details the required four pillars for an adequate BSA/AML compliance program.