Between November 2015 and July 2018, CITIC’s transaction monitoring system failed to detect suspicious activities due to incorrect implementation of detection rules. Additionally, it did not adequately investigate or document the background and purpose of certain transactions.