Security and risk checks were “poor” at the company, but the implosion of the trading firm came as a surprise to insiders.