ASIC said it is considering enforcement action against companies that fail to detect and report breaches of the law in a timely manner, after a damning report found the major banks take more than four-and-a-half years on average to spot a breach.