The BD lacked procedures to collect and review employee-held outside account statements for prohibited trading, FINRA said.