Explanation
According to the web sources I found, FATF Recommendation 18 requires financial institutions to implement group-wide programmes against money laundering and terrorist financing that include policies and procedures for sharing information within the group for AML/CFT purposes12. These programmes should also include compliance management arrangements, screening procedures for hiring employees, an independent audit function and ongoing employee training1.

According to the Financial Action Task Force (FATF), financial institutions should apply a risk-based approach to customer due diligence (CDD), which includes obtaining and updating information on the identity, beneficial ownership, and business activities of their clients. If a client refuses to provide or update such information, or provides false or misleading information, the financial institution should consider this as a red flag for potential money laundering or terrorist financing, and should exit the relationship with the client, unless the circumstances warrant otherwise. Exiting the relationship with a client who refuses to update information is also consistent with the FATF's Recommendation 10, which requires financial institutions to terminate the business relationship if they are unable to perform CDD measures.
References:
1: This document contains the FATF's 40 Recommendations, which are the international standards for combating money laundering and terrorist financing. Recommendation 10 covers the CDD requirements for financial institutions, and paragraph 22 states that "If the financial institution is unable to comply with paragraphs 10 to 12, 15 and 17, it should not open the account, commence business relations or perform the transaction; or should terminate the business relationship; and should consider making a suspicious transactions report in relation to the customer."
2: This document provides guidance on the implementation of the FATF's Recommendations on transparency and beneficial ownership, which are relevant for CDD purposes. It explains the definition of beneficial owner, the risks associated with legal persons and arrangements, and the effective mechanisms to combat the misuse of such entities. It also provides examples of situations where financial institutions should exit the relationship with a client, such as when the client refuses to provide or update information on beneficial ownership or control, or when the client is a shell company or a trust with no legitimate economic purpose.

As part of its enforcement efforts, OFAC publishes a list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So it's covering all

An enterprise-wide compliance culture is a centralized, coordinated approach to ethics and compliance program design and assessment that cuts across multiple business units within an organization1. One key aspect of promoting such a culture is that the relevant information should be shared throughout the organization, so that all employees are aware of the compliance risks, policies, procedures, and expectations, and can act accordingly2. Sharing information also facilitates collaboration, communication, and feedback among different functions and levels of the organization, and helps identify and address any gaps or issues in the compliance program3. By contrast, the other options are not conducive to an enterprise-wide compliance culture, as they either create silos, conflicts, or inefficiencies in the compliance function.
References:
1: Enterprise Compliance Risk Management Services | Deloitte US
2: Enterprise Risk Management and Risk Culture - McKinsey & Company
3: FRB: Speech, Bies-Enterprise-wide Compliance Programs-February 4, 2004 Reference:
https://www.ifc.org/wps/wcm/connect/e7e10e94-3cd8-4f4c-b6f8-1e14ea9eff80/45464_IFC_AML_Report.pdf?M (51)