Except if you're a big and important bank, then things like 'zero tolerance' don't really apply. You then just get a slap on the wrist for insufficient controls

Except if you're a big and important bank, then things like 'zero tolerance' don't really apply. You then just get a slap on the wrist for insufficient controls. Note that they chose not to indict HSBC. it's not that they didn't have enough to go on.