Related provisions for DEPP 6.2.9

1 - 20 of 91 items.
Results filter

Search Term(s)

Filter by Modules

Filter by Documents

Filter by Keywords

Effective Period

Similar To

To access the FCA Handbook Archive choose a date between 1 January 2001 and 31 December 2004 (From field only).

DEPP 6.2.1GRP
The FCA4 will consider the full circumstances of each case when determining whether or not to take action for a financial penalty or public censure. Set out below is a list of factors that may be relevant for this purpose. The list is not exhaustive: not all of these factors may be applicable in a particular case, and there may be other factors, not listed, that are relevant.4(1) The nature, seriousness and impact of the suspected breach, including:(a) whether the breach was deliberate
DEPP 6.2.2GRP
When deciding whether to take action for market abuse7, the FCA4 may consider the following additional factors:4(1) The degree of sophistication of the users of the market in question, the size and liquidity of the market, and the susceptibility of the market to market abuse.(2) The impact, having regard to the nature of the behaviour, that any financial penalty or public censure may have on the financial markets or on the interests of consumers:(a) a penalty may show that high
DEPP 6.2.3GRP
The FCA's4 rules on systems and controls against money laundering are set out in SYSC 3.2 and SYSC 6.3. The FCA4, when considering whether to take action for a financial penalty or censure in respect of a breach of those rules, will have regard to whether a firm has followed relevant provisions in the Guidance for the UK financial sector issued by the Joint Money Laundering Steering Group.44
DEPP 6.2.4GRP
Disciplinary action against senior managers of firms and other individuals is one of the FCA’s key tools in deterring firms and individuals from committing breaches.644
DEPP 6.2.5GRP
In some cases it may not be appropriate to take disciplinary measures against a firm for the actions of an individual6 (an example might be where the firm can show that it took all reasonable steps to prevent the breach). In other cases, it may be appropriate for the FCA4 to take action against both the firm and the individual6. For example, a firm may have breached the rule requiring it to take reasonable care to establish and maintain such systems and controls as are appropriate
DEPP 6.2.6GRP
In addition to the general factors outlined in DEPP 6.2.1 G, there are some additional considerations that may be relevant when deciding whether to take action against an individual under6section 66 of the Act. This list of those considerations is non-exhaustive. Not all considerations below may be relevant in every case, and there may be other considerations, not listed, that are relevant.(1) The individual's6 position and responsibilities. The FCA4 may take into account the
DEPP 6.2.6AGRP
6DEPP 6.2.6BG to DEPP 6.2.9G apply to action taken by the FCA under section 66 of the Act, except for action taken by virtue of section 66A(5). DEPP 6.2.9-AG to DEPP 6.2.9-FG apply only to action taken by virtue of section 66A(5).9
DEPP 6.2.6BGRP
6The FCA may take disciplinary action against an individual where there is evidence of personal culpability on the part of that individual. Personal culpability arises if the individual’s behaviour was deliberate or below the standard which would be reasonable in all the circumstances at the time of the conduct concerned.
DEPP 6.2.7GRP
The FCA will not discipline individuals6 on the basis of vicarious liability (that is, holding them responsible for the acts of others), provided appropriate delegation and supervision has taken place (see APER 4.6.13G, APER 4.6.14G, COCON 4.1.8G and COCON 4.2.17G to COCON 4.2.24G6). In particular, disciplinary action will not be taken against an approved person performing a significant influence function or a senior conduct rules staff member6 simply because a regulatory failure
DEPP 6.2.9-AGRP
9The FCA is able to take action against an SMF manager under section 66A(5) of the Act where: (1) there has been (or continues to be) a contravention of a relevant requirement by the SMF manager’sfirm;(2) at the time of the contravention, the SMF manager was responsible for the management of any of the firm’s activities in relation to which the contravention occurred; and(3) the SMF manager did not take such steps as a person in their position could reasonably be expected to take
DEPP 6.2.9-BGRP
9When deciding whether to take action further to section 66A(5) of the Act, the FCA will follow the approach in DEPP 6.2.1G and DEPP 6.2.6G.
DEPP 6.2.9AGRP
3In addition to the general factors outlined in DEPP 6.2.1 G, there are some additional considerations that the FCA4 will have regard to when deciding whether to take action against a person that performs a controlled function without approval contrary to section 63A of the Act.4(1) The conduct of the person. The FCA4 will take into consideration whether, while performing controlled functions without approval, the person committed misconduct in respect of which, if he had been
DEPP 6.2.10GRP
The primary responsibility for ensuring compliance with Part VI of the Act, the Part 6 rules, the prospectus rules or a provision of the Prospectus Regulation15 or a requirement imposed under such provision rests with the persons identified in section 91(1) and section 91(1A) (Penalties for breach of Part 6 rules) of the Act respectively. Normally therefore, any disciplinary action taken by the FCA4 for contraventions of these obligations will in the first instance be against
DEPP 6.2.11GRP
However, in the case of a contravention by a person referred to in section 91(1)(a) or section 91(1)(b) or section 91(1A) of the Act ("P"), where the FCA4 considers that another person who was at the material time a director of P was knowingly concerned in the contravention, theFCA4 may take disciplinary action against that person. In circumstances where the FCA4 does not consider it appropriate to seek a disciplinary sanction against P (notwithstanding a breach of relevant requirements
DEPP 6.2.13GRP
In deciding whether to take action, the FCA4 will consider the full circumstances of each case. Factors that may be relevant for this purpose include, but are not limited to, the factors at DEPP 6.2.1 G.4
DEPP 6.2.14GRP
The Principles are set out in PRIN 2.1.1 R. The Principles are a general statement of the fundamental obligations of firms under the regulatory system. The Principles derive their authority from the FCA's4 rule-making powers set out in section 137A4(General rule-making power) of the Act. A breach of a Principle will make a firm liable to disciplinary action. Where the FCA4 considers this is appropriate, it will discipline a firm on the basis of the Principles alone.444
DEPP 6.2.16GRP
The Listing Principles and Premium Listing Principles5 are set out in LR 7. The Listing Principles set out in LR 7.2.1 R5 are a general statement of the fundamental obligations of all5listed companies. In addition to the Listing Principles, the Premium Listing Principles set out in LR 7.2.1A R are a general statement of the fundamental obligations of all listed companies with a premium listing11. The Listing Principles and Premium Listing Principles5 derive their authority from
DEPP 6.2.19GRP
Some types of breach may potentially result not only in action by the FCA4, but also action by other domestic or overseas regulatory authorities or enforcement agencies.4
DEPP 6.2.20GRP
When deciding how to proceed in such cases, the FCA4 will examine the circumstances of the case, and consider, in the light of the relevant investigation, disciplinary and enforcement powers, whether it is appropriate for the FCA4 or another authority to take action to address the breach. The FCA4 will have regard to all the circumstances of the case including whether the other authority has adequate powers to address the breach in question.444
DEPP 6.2.21GRP
In some cases, it may be appropriate for both the FCA4and another authority to be involved, and for both to take action in a particular case arising from the same facts. For example, a breach of RIE rules may be so serious as to justify the FCA4 varying or cancelling the firm's Part IV permission, or withdrawing approval from approved persons, as well as action taken by the RIE. In such cases, the FCA4 will work with the relevant authority to ensure that cases are dealt with efficiently
DEPP 6.2.23GRP
The FCA4 will not take action against a person over behaviour7 which does not amount to market abuse. Behaviour is less likely to amount to market abuse where it7 (a) conforms with the Takeover Code or rules of an RIE and (b) falls within the terms of MAR 1.10.4G to 1.10.6G7 which state7 that behaviour7 so conforming is unlikely to, of itself,7 amount to market abuse. The FCA4 will seek the Takeover Panel's or relevant RIE's views on whether behaviour7 complies with the Takeover
DEPP 6.2.24GRP
If any of the circumstances in DEPP 6.2.26 G apply, and the FCA4 considers that the use of its disciplinary powers under section 123 or section 129, or of its injunctive powers under section 381 or of its powers relating to restitution under section 383 or 384 is appropriate, it will not take action during an offer to which the Takeover Code applies except in the circumstances set out in DEPP 6.2.27 G.4
EG 19.10.1RP
1The FCA, together with several other UK authorities, has powers under Part 8 of the Enterprise Act to enforce breaches of consumer protection law. Where a breach has been committed, the FCA will liaise with other authorities, particularly the Competition and Markets Authority (the CMA), to determine which authority is best placed to take enforcement action. The FCA would generally expect to be the most appropriate authority to deal with breaches by authorised firms in relation
EG 19.10.4RP
1The FCA has powers under Part 8 of the Enterprise Act both as a “designated enforcer” in relation to domestic and Schedule 132 infringements and as a “Schedule 132 enforcer” which gives the FCA and other Schedule 132 enforcers additional powers in relation to Schedule 132 infringements under the CRA2.
EG 19.10.6RP
1The FCA may also apply, if necessary without notice, for interim enforcement orders where immediate temporary prohibition of the relevant conduct is expedient pending full consideration by the court. Such interim orders can also be sought pre-emptively in relation to Schedule 132 infringements, but again only preventing conduct in the course of business.
EG 19.10.7RP
1The FCA’s investigative powers in support of its Enterprise Act enforcement powers are set out in Schedule 5 to the CRA. The FCA can, under Schedule 5, require any person to provide it with information which will enable it to (i) exercise or consider exercising its functions as an enforcer; or (ii) determine whether a person is complying with an enforcement order, an interim enforcement order or an undertaking given as described below. If the FCA requires a person to provide
EG 19.10.8RP
1Before the FCA may apply for an enforcement order, including an interim enforcement order, it must: (1) give notice to the CMA of its intention to apply for an enforcement order; and (2) unless the application relates to breach of an undertaking given to the court (other than one to provide information), consult the person against whom the enforcement order would be made.
EG 19.10.10RP
1The aim of consultation is to ensure that any action taken is necessary and proportionate, and to ensure that businesses are given a reasonable opportunity to put things right before the courts become involved. The consultation period starts when the person receives the FCA's request for consultation and runs whether or not that person agrees to be consulted and/or is available for consultation.
EG 19.10.12RP
1The FCA may take steps to publish the undertakings it receives, and may apply to the court for an enforcement order if a person fails to comply with an undertaking that he has given.
DEPP 5.1.1GRP
(1) 1A person subject to enforcement action may agree to a financial penalty or other outcome rather than contest formal action by the FCA.4Alternatively, they may enter into a focused resolution agreement and in this way partly contest the proposed action (see DEPP 5.1.8AG to DEPP 5.1.8DG).54(1A) 5Further, even if the person subject to enforcement action wishes to fully contest the proposed enforcement action, they may choose to do so by (i) agreeing to the FCA issuing the required
DEPP 5.1.2GRP
A person who is or may be subject to enforcement action may wish to discuss the proposed action with FCA4 staff through settlement discussions.4
DEPP 5.1.3GRP
Settlement discussions may take place at any time during the enforcement process if both parties agree. This might be before the giving of a warning notice, before a decision notice, or even after referral of the matter to the Tribunal. But the FCA4 would not normally agree to detailed settlement discussions until it has a sufficient understanding of the nature and gravity of the suspected misconduct or issue to make a reasonable assessment of the appropriate outcome. Settlement
DEPP 5.1.6GRP
The terms of any proposed settlement:(1) will be put in writing and be agreed by FCA4 staff and the person concerned;4(2) may refer to a draft of the proposed statutory notices setting out the facts of the matter and the FCA's4 conclusions; 4(3) may, depending upon the stage in the enforcement process at which agreement is reached, include an agreement by the person concerned to: (a) waive and not exercise any rights under sections 387 (Warning notices) and 394 (Access to Authority
DEPP 5.1.8BGRP
5The terms of any proposed focused resolution agreement:(1) will be put in writing and be agreed by FCA staff and the person concerned;(2) may refer to a draft of the proposed warning notice; and (3) may, depending upon the stage in the enforcement process at which agreement is reached, include an agreement by the person concerned to: (a) waive and not exercise any rights under sections 387 (Warning notices) and 394 (Access to Authority material) of the Act to notice of, or access
DEPP 5.1.8EGRP
(1) 5The purpose of this section is to define a procedure (the “expedited reference procedure”) enabling a person subject to enforcement action to challenge the proposed action before the Tribunal without engaging with the FCA’s internal decision-making process.(2) DEPP 5.1.8FG to DEPP 5.1.8IG set out the circumstances in which the expedited reference procedure is available, the steps a person must take to make use of the procedure, and how the procedure operates, depending on
DEPP 5.1.8GGRP
5To use the expedited reference procedure, the person subject to enforcement action must notify the FCA that they:(1) wish to make an expedited reference to the Tribunal; and(2) waive and will not exercise any rights under section 387(2) of the Act in respect of the warning notice given (or to be given) in relation to the proposed action.
DEPP 5.1.8JGRP
5Once a decision notice has been given as part of the expedited reference procedure (whether by the settlement decision makers or the RDC), it is the responsibility of the person subject to enforcement action to seek to refer the matter to the Tribunal under the Act if they so wish. If the matter is not referred to the Tribunal within the time required under section 390(1) of the Act, the FCA will, on taking the action to which the decision notice relates, give a final notice
EG 2.2.2RP
3The FCA does not have a set of enforcement priorities that are distinct from the priorities of the FCA as a whole. Rather, the FCA consciously uses the enforcement tool to deliver its overall strategic priorities. The areas and issues which the FCA as an organisation regards as priorities at any particular time are therefore key in determining at a strategic level how enforcement resource should be allocated. FCA priorities will influence the use of resources in its supervisory
EG 2.2.4RP
3This does not mean that the FCA will only take enforcement action in priority strategic areas. There will always be particularly serious cases where enforcement action is necessary, ad hoc cases of particular significance in a markets, consumer protection or financial crime context, or cases that the FCA thinks are necessary to achieve effective deterrence.
EG 2.2.5RP
3The combination of the priority given to certain types of misconduct over others and the FCA's risk-based approach to enforcement means that certain cases will be subject to enforcement action and others not, even where they may be similar in nature or impact. The FCA's choice as to the use of the enforcement tool is therefore a question of how the FCA uses its resources effectively and efficiently and how it ensures that it is an effective regulator.
EG 2.2.6RP
In all cases, before 4it proceeds with an investigation, the FCA will satisfy itself that there are grounds to investigate under the statutory provisions that give the FCA powers to appoint investigators. Another consideration will be whether the FCA has any agreements in place regarding taking5 action on behalf of, or otherwise providing5 assistance to, other authorities5. EG 2.5.14discusses the position where other authorities may have an interest in a case. If the statutory
EG 2.2.8RP
4The FCA’s referral criteria are published on the Enforcement section of the FCA’s website: http://www.fca.org.uk/about/enforcement/referral-criteria. In considering whether an enforcement investigation is likely to further the FCA’s aims and objectives, the FCA will consider factors that address the following issues:(1) any available supporting evidence and the proportionality and impact of opening an investigation;(2) what purpose or goal would be served if the FCA were to end
SUP 10C.12.17GRP
The FCA will generally limit an enforcement action time-limited approval for a period long enough to allow the investigation to be completed so far as relevant to the candidate. Imposing a time limitation on approval would allow the FCA to look at the situation in more detail after approval, with the benefit of all the facts arising from the investigation.
EG 6.2.12RP
3The FCA will consider the circumstances of each case, but will ordinarily publicise enforcement action where this has led to the issue of a final notice. The FCA may also publicise enforcement action where this has led to the issue of a decision notice. The FCA will decide on a case-by-case basis whether to publish information about the matter to which a decision notice relates, but expects normally to publish a decision notice if the subject of enforcement action decides to
EG 6.2.16RP
3Publishing notices is important to ensure the transparency of FCA decision-making; it informs the public and helps to maximise the deterrent effect of enforcement action. The FCA will upon request review warning notice statements, decision notices, final notices and related press releases that are published on the FCA's website. The FCA will determine at that time whether continued publication is appropriate, or whether notices and publicity should be removed or amended.
EG 6.2.19RP
3In cases where the FCA publishes a warning notice statement and the FCA subsequently decides not to take any further action, or where it publishes a decision notice and the subject of enforcement action successfully refers the matter to the Tribunal, the FCA will make it clear on its website that the warning notice or the 2decision notice no longer applies. The FCA will normally do this by publishing a notice of discontinuance with the consent of the person to whom the notice
EG 2.8.2RP
1The FCA will, in appropriate cases, take enforcement action on the basis of the Principles alone (see also DEPP 6.2.14 G). This will have the benefit of providing further clear examples of how the Principles work in practice.
EG 2.8.3RP
1The FCA wishes to encourage firms to exercise judgement about, and take responsibility for, what the Principles mean for them in terms of how they conduct their business. But we also recognise the importance of an environment in which firms understand what is expected of them. So we have indicated that firms must be able reasonably to predict, at the time of the action concerned, whether the conduct would breach the Principles. This has sometimes been described as the “reasonable
EG 2.8.4RP
1To determine whether there has been a failure to comply with a Principle, the standards we will apply are those required by the Principles at the time the conduct took place. The FCA will not apply later, higher standards to behaviour when deciding whether to take enforcement action for a breach of the Principles. Importantly, however, where conduct falls below expected standards the FCA considers that it is legitimate for consequences to follow, even if the conduct is widespread
EG 3.11.2RP
1A firm’s report – produced internally or by an external third party – can clearly assist the firm, but may also be useful to the FCA where there is an issue of regulatory concern. Sharing the outcome of an investigation can potentially save time and resources for both parties, particularly where there is a possibility of the FCA taking enforcement action in relation to a firm’s perceived misconduct or failing. This does not mean that firms are under any obligation to share the
EG 3.11.3RP
1Work done or commissioned by the firm does not fetter the FCA's ability to use its statutory powers, for example to require a skilled person’s report under section 166 of the Act or to carry out a formal enforcement investigation; nor can a report commissioned by the firm be a substitute for formal regulatory action where this is needed or appropriate. But even if formal action is needed, it may be that a report could be used to help the FCA decide on the appropriate action to
DEPP 6.6.2GRP
In addition to the factors considered in Step 2 for cases against firms (DEPP 6.5A) and cases against individuals (DEPP 6.5B),1 the following considerations are relevant.1(1) In general, the FCA's2 approach to disciplinary action arising from the late submission of a report will depend upon the length of time after the due date that the report in question is submitted.2(2) If the person concerned is an individual, it is open to him to make representations to the FCA2 as to why
DEPP 6.6.3GRP
In addition, in appropriate cases, the FCA2 may bring disciplinary action against the individuals3 within the firm's management who are ultimately responsible for ensuring that the firm's reports are completed and returned to the FCA2.22
DEPP 6.6.5GRP
In most late reporting cases, it will not be necessary for the FCA2 to appoint an investigator since the fact of the breach will be clear. It follows that the FCA2 will not usually send the firm concerned a preliminary findings letter for late-reporting disciplinary action.22
EG 3.3.2RP
1The factors the FCA will consider when deciding whether to use the section 166 power include: (1) If the FCA's objectives for making further enquiries are predominantly for the purposes of fact finding i.e. gathering historic information or evidence for determining whether enforcement action may be appropriate, the FCA's information gathering and investigation powers under sections 167 and 168 of the Act are likely to be more effective and more appropriate than the power under
EG 3.3.3RP
1Where it exercises this power, the FCA will make clear both to the firm and to the skilled person the nature of the concerns that led the FCA to decide to appoint a skilled person and the possible uses of the results of the report. But a report the FCA commissions for purely diagnostic purposes could identify issues which could lead to the appointment of an investigator and/or enforcement action.
SUP 15.11.4GRP
Under section 64C of the Act, a firm must notify the FCA if it takes disciplinary action against certain people working for an SMCR firm5 and the reason for this action is a reason specified in rules made by the FCA (those rules are set out4 in SUP 15.11.6R)4. 4
EG 19.29.2RP
1The FCA's approach to taking enforcement action under the Immigration Regulations will mirror its general approach to enforcing the Act, as set out in EG 2. It will seek to exercise its enforcement powers in a manner that is transparent, proportionate and responsive to the issue and consistent with its publicly stated policies. It will also seek to ensure fair treatment when exercising its enforcement powers. Finally, it will aim to change the behaviour of the person who is
DEPP 6.5D.1GRP
(1) 1The FCA's3 approach to determining penalties described in DEPP 6.5 to DEPP 6.5C is intended to ensure that financial penalties are proportionate to the breach. The FCA3 recognises that penalties may affect persons differently, and that the FCA3 should consider whether a reduction in the proposed penalty is appropriate if the penalty would cause the subject of enforcement action serious financial hardship.333(2) Where an individual or firm claims that payment of the penalty
DEPP 6.5D.2GRP
(1) In assessing whether a penalty would cause an individual serious financial hardship, the FCA3 will consider the individual’s ability to pay the penalty over a reasonable period (normally no greater than three years). The FCA's3 starting point is that an individual will suffer serious financial hardship only if during that period his net annual income will fall below £14,000 and his capital will fall below £16,000 as a result of payment of the penalty. Unless the FCA3 believes
DEPP 6.5D.4GRP
(1) The FCA3 will consider reducing the amount of a penalty if a firm will suffer serious financial hardship as a result of having to pay the entire penalty. In deciding whether it is appropriate to reduce the penalty, the FCA3 will take into consideration the firm’s financial circumstances, including whether the penalty would render the firm insolvent or threaten the firm’s solvency. The FCA3 will also take into account its statutory objectives3, for example in situations where
DEPP 2.5.18GRP
Some of the distinguishing features of notices given under enactments other than the Act are as follows: (1) [deleted]66(2) [deleted]66(3) Friendly Societies Act 1992, section 58A1: The warning notice and decision notice must set out the terms of the direction which the FCA6 proposes or has decided to give and any specification of when the friendly society is to comply with it. A decision notice given under section 58A(3) must give an indication of the society's right, given by
DEPP 6.7.1GRP
Persons subject to enforcement action may be prepared to agree the amount of any financial penalty, or the length of any period of suspension, restriction, condition,5 limitation or disciplinary prohibition5 (see DEPP 6A)4, and other conditions which the FCA seeks to impose by way of such action. These4 conditions might include, for example, the amount or mechanism for the payment of compensation to consumers. The FCA recognises the benefits of such agreements, as4 they offer
DEPP 6.7.4GRP
(1) Any settlement agreement6 between the FCA3 and the person concerned will therefore need to include a statement as to the appropriate penalty discount in accordance with this procedure.3(2) In certain circumstances the person concerned may consider that it would have been possible to reach a settlement at an earlier stage in the action, and argue that it should be entitled to a greater percentage reduction in penalty than is suggested by the table at DEPP 6.7.3G (3). It may
EG 19.11.1RP
1These Regulations gave2 effect to the Distance Marketing Directive.24 Under the Regulations, the FCA can enforce breaches of the Regulations concerning “specified contracts”. Specified contracts are certain contracts for the provision of financial services which are made at a distance and do not require the simultaneous physical presence of the parties to the contract. 24 Directive 2002/65/EC
EG 19.11.3RP
1The FCA may also prosecute offences under the Regulations which relate to specified contracts. It will generally be appropriate for the FCA to seek to resolve the breach by obtaining an undertaking before it applies for an injunction or initiates a prosecution. Where a failure by a firm to meet the requirements of the Regulations also amounts to a breach of the FCA'srules, the FCA will consider all the circumstances of the case when deciding whether to take action for a breach
EG 9.3.1RP
2When the FCA has concerns about the fitness and propriety of an approved person, it may consider whether it should prohibit that person from performing functions in relation to regulated activities, withdraw its approval, or both. In deciding whether to withdraw its approval and/or make a prohibition order, the FCA will consider in each case whether its statutory objectives can be achieved adequately by imposing disciplinary sanctions, for example, public censures or financial
EG 9.3.2RP
2When the FCA1 decides whether to make a prohibition order against an approved person and/or withdraw their1 approval, the FCA will consider all the relevant circumstances of the case. These may include, but are not limited to those set out below. (1) The matters set out in section 61(2) of the Act. (2) Whether the individual is fit and proper to perform functions in relation to regulated activities. The criteria for assessing the fitness and propriety of
EG 16.2.5RP
1When it decides whether to exercise its power to disapply an exemption from the general prohibition in relation to a member, the FCA will take into account all relevant circumstances which may include, but are not limited to, the following factors: (1) Disciplinary or other action taken by the relevant designated professional body, where that action relates to the fitness and propriety of the member concerned: where the FCA considers that its concerns in relation to the fitness
EG 19.14.4RP
1This means that there will be situations in which the FCA has powers to investigate and take action under both the Act and the Money Laundering Regulations. The FCA will consider all the circumstances of the case when deciding what action to take and, if it is appropriate to notify the subject about the investigation, will in doing so inform them about the basis upon which the investigation is being conducted and what powers it is using. The FCA will adopt the approach outlined
EG 19.14.6RP
1The FCA will adopt a risk-based approach to its enforcement under2 the Money Laundering Regulations. Failures in anti-money laundering or counter-terrorist financing2 controls will not automatically result in disciplinary sanctions, although enforcement action is more likely where a firm has not taken adequate steps to identify its2 risks or put in place appropriate controls to mitigate those risks, and failed to take steps to ensure that controls are being effectively implemented.