Firm pays for lack of cyber controls

FINRA enforcement action flags need to require multi-factor authentication for third-party service providers