The decision is a result of earlier efforts to persuade Citigroup to fix its risk controls. Entering this year, for example, Citigroup had numerous outstanding compliance- and technology-related issues that had been outlined in regulatory notices known as Matters Requiring Attention and Matters Requiring Immediate Attention, according to one of the people familiar with the matter.