The SEC detailed failures in reporting suspicious trading, implementing identity theft protections, addressing unauthorized system access, and maintaining required records from 2020 to 2021.