The FATF is an inter-governmental body that sets standards and promotes effective implementation of legal, regulatory and operational measures to combat money laundering, terrorist financing and other related threats to the integrity of the international financial system1. The FATF identifies jurisdictions with serious strategic deficiencies in their anti-money laundering / counter financing of terrorism (AML/CFT) regimes and issues public statements to warn the international community of the risks emanating from these jurisdictions2. These jurisdictions are also known as high-risk jurisdictions subject to a call for action, or the "black list" in external sources2. The FATF urges its members and all other jurisdictions to apply counter-measures to protect themselves from the money laundering and terrorist financing risks posed by these jurisdictions2. Counter-measures are enhanced due diligence or restrictive measures that go beyond the normal AML/CFT requirements, such as requiring additional information or documentation, rejecting transactions, restricting business relationships, or terminating correspondent banking relationships3. The FATF also provides guidance on the types and levels of counter-measures that may be appropriate, depending on the specific risks and circumstances of each jurisdiction3.
References:
* 1: What is the FATF? | FATF
* 2: High-Risk Jurisdictions subject to a Call for Action | FATF
* 3: Guidance on Counter Proliferation Financing - The Implementation of Financial Provisions of United Nations Security Council Resolutions to Counter the Proliferation of Weapons of Mass Destruction | FATF

The auditor should include the regulatory violation in the audit report and report it to the board of directors.
This is because the auditor has the responsibility to report any findings of non-compliance or material weaknesses in the institution's internal controls, policies, and procedures. The auditor should also provide recommendations for corrective actions and follow-up on their implementation. The board of directors has the ultimate oversight and accountability for the institution's compliance program and should be informed of any significant issues or risks that may affect the institution's reputation, operations, or regulatory status12.
References:
1: CAMS Certification Package - 6th Edition | ACAMS, Chapter 6: Developing an Effective Anti-Money Laundering Program, p. 125-126 2: The Wolfsberg Group, The Wolfsberg Anti-Money Laundering Principles for Correspondent Banking, October 2014, p. 7, https://www.wolfsberg-principles.com/sites/default/files/wb
/pdfs/Wolfsberg-Correspondent-Banking-Principles-2014.pdf