. "Firms should also consider including information on SAR confidentiality and the penalties associated with unauthorized disclosure in its ongoing training of employees." . . .