The control lapses identified in the investigation relate to CAHK’s failure to continuously monitor business relationships with some of its customers by conducting appropriate scrutiny of transactions carried out for them during the period between 11 February 2016 and 2 October 2016.