; and (B) the name of the auditing firm that made the attestation described in subparagraph (A) of this paragraph. (c) Enforcement (1) Civil penalties (A) In general With respect to an entity that is subject to the requirements under subsection (a) and fails to satisfy those requirements, the Under Secretary, through the Office, shall, subject to subparagraph (B), impose a civil penalty on the entity as follows: (i) If that failure is the only such failure by the entity during the most recent 24-month period, the amount of the penalty shall be the greater of the following: (I) 25 cents per user or customer of the entity (as applicable), as of the date on which the penalty is imposed. (II) 2.5 basis points of the total assets under management by the entity, as of the date on which the penalty is imposed. (ii) If the entity has 1 additional such failure during the most recent 24-month period, the amount of the penalty shall be the greater of the following: (I) 55 cents per user or customer of the entity (as applicable), as of the date on which the penalty is imposed. (II) 5.5 basis points of the total assets under management by the entity, as of the date on which the penalty is imposed. (iii) If the entity has more than 1 additional such failure during the most recent 24-month period, the amount of the penalty shall be the greater of the following: (I) 90 cents per user or customer of the entity (as applicable), as of the date on which the penalty is imposed. (II) 9 basis points of the total assets under management by the entity, as of the date on which the penalty is imposed. (B) Limitation The Under Secretary, through the Office, may not impose a penalty on an entity under subparagraph (A) if the imposition of that penalty would cause the total amount of penalties imposed on that entity under that subparagraph for the year in which the penalty would be imposed to exceed the lesser of the following: (i) $1 per user or customer of the entity (as applicable), as of the date on which the penalty would be imposed.