Financial crime governance should be happening in the boardroom and the legal and financial fallout from the lack of enforcement is becoming increasingly serious