It's on one small law firm to pay more than $11,000 in Virginia State Bar sanctions after no one reviewed the firm's bills or bank statements for years except for its bookkeeper, who was ultimately convicted of embezzling nearly $650,000.