The most frequent finding with an initial review is that the company's BSA Officer doesn't even have the ability to file a suspicious activity report. This indicates a lack of intention to comply, so knocking this out is a first priority.
https://bsaefiling.fincen.treas.gov/main.html
