After responses to three exam deficiency letters fall short, SEC moves to penalties