Which of the following statements about the independent audit of an insurance company's AML program are correct?
1) The audit is conducted by an external party
2) The audit evaluates the effectiveness of the AML program
3) The audit is optional for insurance companies
4) The audit focuses on financial statements