For mis-selling insurance policies, failing to investigate complaints adequately, the Board being insufficiently engaged with compliance, and senior management being reluctant to address customer risks.