Even when the exchange detected such violations , it " often failed to take appropriate disciplinary actions " against individuals or firms .
Even when the exchange detected violations , it often failed to take disciplinary action , the SEC said .
We need to challenge old habits and seriously rethink business-as-usual , " he wrote .