The industry self-regulator is also concerned about third-party vendors, anti-money-laundering policies and whether certain ...