“Some companies were proactive in addressing these deficiencies in a timely fashion while others' control structures remained problematic,” the MMC said.