The SEC found that the exchange often failed to take disciplinary action against firms with violations.
Even when the exchange detected such violations , it " often failed to take appropriate disciplinary actions " against individuals or firms .