It was discovered in Nov last yeat that an employee had modified an incoming ACH file to prevent a personal debit transaction from being processed in order to have additional float time. A SAR was not filed at time of discovery. Shouldn't the bank go ahead and do the SAR filing?