Popular on EntSun
- IRF Builders Forum Brings Global Leaders to Washington, D.C. to Advance Religious Freedom Through Cooperative Engagement - 227
- BillBoards Inc. Hits the Road with God Bless America Tour and Reality Series Now Streaming on Tubi TV - 173
- databahn Launches GenAI Sales Intelligence Platform to Revolutionize Fortune 500 and Global 2000 Account Research - 134
- Byrd Davis Alden & Henrichson Launches Independence Day Safe Ride Initiative with 500 Free Uber Credits - 126
- The ITeam Ranked on Channel Partners 2025 MSP 501—Tech Industry's Most Prestigious List of Managed Service Providers Worldwide - 119
- Revolutionary Blockchain Platform Okh Finance Announces Okh Finance(OKKH) Token Launch to Transform Global Asset Leasing Market - 119
- Agreement to Supply US-Based Defense Provider with Thin-Film Solar Tech for Orbital Application; Ascent Solar Technologies, Inc. (N A S D A Q: ASTI) - 117
- NYC Leadership Strategist Stacie Selise Launches Groundbreaking 4S Framework Series to Redefine Executive Excellence - 113
- Easton & Easton, LLP Files Suit Against The Dwelling Place Anaheim & Vineyard USA Over Abuse Allegations - 107
- Josh and Heidi Follow Up the Much Anticipated and Successful Launch of the "Spreading the Good BUZZ" Podcast with a Personal Request - 106
Similar on EntSun
- Be Part of the World's Largest Art Biennale | Moons, Castles, Trees | Copenhagen Chronotopes
- SeedList Launching Institutional Crypto Crowdfunding Project to Empower Retail Investors and Disrupt the VC-Dominated Crypto Fundraising Landscape
- databahn Announces Subscription Access to Fortune 500 GenAI Deep Dive Sales Intelligence Reports
- AI startup Congero offers instant websites with 24/7 updates - aiming to replace web agencies
- Iterators LLC Honored with IST82 State Award for Accessibility in Massachusetts
- Vinnetwork Unveils Decentralized AI Platform with Vinnetwork(VIN) Token to Challenge Tech Giants' Data Monopoly
- BIYA Forecasts 2025 Surge with ¥300M ($41.8 M USD) in Revenue and ¥25M Profit from Cloud Based HR Solutions: Baiya Intl. Group (N A S D A Q: BIYA)
- Robin Launches Legal Intelligence Platform to solve intelligence gap in Fortune 500 legal teams
- Bio-Inspired Technology-Dynamic and Adaptable for unknown real-world environments
- $12.8 Million Net Revenue for 2024 for Cloud-Based Crowdsourcing Recruitment and SaaS-Enabled HR Solutions Provider: Baiya International Group Inc
Avoiding the 17a-4 Quagmire - AdvisorVault's Guide for Small FINRA Firms
EntSun News/10833023
AdvisorVault, today's experts on solving the data archiving demands of SEC rule 17a-4, announces new guidelines for small FINRA firms. By Allan Lonz, President - AdvisorVault
NEW YORK - EntSun -- I've been saying for years that data compliance is a necessary evil, and money spent trying to appease regulators does nothing for the bottom line and surely adds nothing to "operational efficiencies". Also, firms can go years without ever being audited, but worse, when it does happen, no one knows what to expect when the regulator shows up. Sadly, it's a crapshoot for compliance officers when they're eventually asked to reproduce a sample set of electronic records from up to seven years back - which may not even be reviewed at all.
Also, I've been lecturing firms that they must constantly seek ways to keep data compliance costs as low as possible yet keep regulators happy. This is no easy task given all the confusion today, however, the best start is to understand the basics about SEC rule 17a-4. This doesn't mean downloading and reading the whole 65-page document with its dozens of updates and amendments but, instead, understanding how to choose the most efficient technology while passing the electronic records request – the test a regulator will do during the audit where they'll ask for a sample data set from the archive, whatever that may be.
Lots of Questions, Few Answers:
Now, I know – likely more than anyone today - that small firms don't have the money to pay in-house compliance or tech staff so they have to figure it out themselves. At the same time new questions are coming up all the time, for instance: What kind of hard drive is needed to store data? Is the cloud 17a-4 compliant? Can everyone in the company simply store all their files in Dropbox? How about OneDrive? Is data in the cloud indexed? What about Office 365 or Gmail? Do they archive emails for 17a-4? If a small firm moved its office virtual, who does the disaster recovery? Does the cloud provider have to give them their business continuity planning procedure or is there another third-party add-on? Do FINRA firms even have to archive data in the cloud?
Unfortunately, there are few answers readily available, and FINRA is no help in this area; they are far behind, as they don't have the in-house expertise to guide members in "best practice for electronic records retention," yet they're the first ones through the door handing out fines. Further, their on-site auditors aren't up to date either: they still tell firms they must use worm disk for data storage. Where, in reality, that was changed in 2003 when rule 17a-4 was amended by the SEC to allow the use of software to retain data, independent of hard disk. Essentially this means vendors of 17a-4 can archive data simply by allowing a specified expiry or retention period to block record deletion or alteration within their software programming. Then, after the expiry is reached or the retention period has lapsed, data can be deleted from the archive, thereby freeing space for reuse. A win-win for everyone, otherwise there will be piles of useless worm disks wasting space and money. Yet few firms are aware of this.
More on EntSun News
The Basics of 17a-4:
Nonetheless, despite all this confusion, there are a few basic things I've learned over the years about 17a-4 that I want to share that will explain how to keep costs low as possible yet reduce the risk.
First, when it comes to data security, there is no mystery in proving to FINRA that you're keeping hackers off your system. It's a simple matter of applying proper permissions and strong password policies to anything accessed from outside such as VPN connections, servers, and cloud systems. For example, making sure there's a single user with admin permissions only and the password for this user is complex with frequent changes will keep regulators happy, no need to call in James Bond. Also, there's this confusion among FINRA firms that putting data in the cloud automatically makes it non-compliant, that's not true – in fact, FINRA has now migrated all their systems to the cloud themselves.
The reality is FINRA doesn't care where data is stored. Their only concern is that it's properly retained, which means: (1) a designated third party makes secondary copies of this data, (2), retains it for seven years in its original format, and (3) can reproduce this data if requested - the three essentials of rule 17a-4. AdvisorVault customers are moving to the cloud all the time and keeping compliant. They are going with Office 365, with OneDrive, Google Drive or Dropbox, then we simply plugs into whatever they choose and transfers it over to its 17a-4 compliant system, therefore acting as its customers D3P at the same time.
Another big mistake I notice is firms thinking they need to archive everything or risk failing the audit. Again, rule 17a-4 is vague on this by saying firms must retain all communications including books and records, which leaves lots of interpretation these days; meanwhile, vendors take advantage of this confusion, trying to inflate their bottom line by selling archiving products that aren't needed. It's essentially a scare tactic. For instance, there's this crazy idea going around that all social media used by reps must be archived such as Twitter posts, Facebook and LinkedIn pages; essentially it's believed that every website a rep decides to put their smiley face on should be backed up. It's not the case. You can simply avoid this quagmire by creating an IT communication policy that clearly outlines what compliance is allowing people to communicate with, then just say it's only going to be email – and Bob's your uncle.
More on EntSun News
Finally, when small FINRA firms are trying to keep data compliance costs as low as possible to avoid those nasty fines, there must be seamless checks in place to make sure no gaps appear as the firm grows. For example, when a new employee is added, any files that they create will automatically be captured in the 17a-4 archive, this applies to their email as well. Incidentally, the best way to accomplish this is using the cloud because archiving software can automatically detect new sites, folders, or email accounts within cloud services: another great reason to move your office to the cloud since this option isn't available with in-house email or file storage systems.
About AdvisorVault:
AdvisorVault is the only designated third party focusing on solving the data archiving demands of SEC rule 17a-4. Our service is designed specifically for small firms that need one vendor to help them satisfy today's demands surrounding data archiving and supervision. We have created a centralized archiving option that captures data and emails no matter where they are stored - in-house or in the cloud: total peace of mind - out of the box.
AdvisorVault Contact:
Allan Lonz, President
alonz@advisorvault.org
www.advisorvault.org
Direct: 416-985-0310
Toll-free: 1-866-732-1407 ex 1
Also, I've been lecturing firms that they must constantly seek ways to keep data compliance costs as low as possible yet keep regulators happy. This is no easy task given all the confusion today, however, the best start is to understand the basics about SEC rule 17a-4. This doesn't mean downloading and reading the whole 65-page document with its dozens of updates and amendments but, instead, understanding how to choose the most efficient technology while passing the electronic records request – the test a regulator will do during the audit where they'll ask for a sample data set from the archive, whatever that may be.
Lots of Questions, Few Answers:
Now, I know – likely more than anyone today - that small firms don't have the money to pay in-house compliance or tech staff so they have to figure it out themselves. At the same time new questions are coming up all the time, for instance: What kind of hard drive is needed to store data? Is the cloud 17a-4 compliant? Can everyone in the company simply store all their files in Dropbox? How about OneDrive? Is data in the cloud indexed? What about Office 365 or Gmail? Do they archive emails for 17a-4? If a small firm moved its office virtual, who does the disaster recovery? Does the cloud provider have to give them their business continuity planning procedure or is there another third-party add-on? Do FINRA firms even have to archive data in the cloud?
Unfortunately, there are few answers readily available, and FINRA is no help in this area; they are far behind, as they don't have the in-house expertise to guide members in "best practice for electronic records retention," yet they're the first ones through the door handing out fines. Further, their on-site auditors aren't up to date either: they still tell firms they must use worm disk for data storage. Where, in reality, that was changed in 2003 when rule 17a-4 was amended by the SEC to allow the use of software to retain data, independent of hard disk. Essentially this means vendors of 17a-4 can archive data simply by allowing a specified expiry or retention period to block record deletion or alteration within their software programming. Then, after the expiry is reached or the retention period has lapsed, data can be deleted from the archive, thereby freeing space for reuse. A win-win for everyone, otherwise there will be piles of useless worm disks wasting space and money. Yet few firms are aware of this.
More on EntSun News
- California Family Launches Billboard to Reach "Pardon Czar" Alice Marie Johnson
- Performance Slots Available: Collision Course Concert Series Heads to Atlanta, Tampa & Brooklyn
- Rent Like A Champion Acquires CollegeWeekends
- Sumter Landing Dental Care Launches Summer Special on Full Mouth Reconstruction
- Seligson Law Launches New Website to Support Cannabis Businesses in California and New York
The Basics of 17a-4:
Nonetheless, despite all this confusion, there are a few basic things I've learned over the years about 17a-4 that I want to share that will explain how to keep costs low as possible yet reduce the risk.
First, when it comes to data security, there is no mystery in proving to FINRA that you're keeping hackers off your system. It's a simple matter of applying proper permissions and strong password policies to anything accessed from outside such as VPN connections, servers, and cloud systems. For example, making sure there's a single user with admin permissions only and the password for this user is complex with frequent changes will keep regulators happy, no need to call in James Bond. Also, there's this confusion among FINRA firms that putting data in the cloud automatically makes it non-compliant, that's not true – in fact, FINRA has now migrated all their systems to the cloud themselves.
The reality is FINRA doesn't care where data is stored. Their only concern is that it's properly retained, which means: (1) a designated third party makes secondary copies of this data, (2), retains it for seven years in its original format, and (3) can reproduce this data if requested - the three essentials of rule 17a-4. AdvisorVault customers are moving to the cloud all the time and keeping compliant. They are going with Office 365, with OneDrive, Google Drive or Dropbox, then we simply plugs into whatever they choose and transfers it over to its 17a-4 compliant system, therefore acting as its customers D3P at the same time.
Another big mistake I notice is firms thinking they need to archive everything or risk failing the audit. Again, rule 17a-4 is vague on this by saying firms must retain all communications including books and records, which leaves lots of interpretation these days; meanwhile, vendors take advantage of this confusion, trying to inflate their bottom line by selling archiving products that aren't needed. It's essentially a scare tactic. For instance, there's this crazy idea going around that all social media used by reps must be archived such as Twitter posts, Facebook and LinkedIn pages; essentially it's believed that every website a rep decides to put their smiley face on should be backed up. It's not the case. You can simply avoid this quagmire by creating an IT communication policy that clearly outlines what compliance is allowing people to communicate with, then just say it's only going to be email – and Bob's your uncle.
More on EntSun News
- databahn Announces Subscription Access to Fortune 500 GenAI Deep Dive Sales Intelligence Reports
- AI startup Congero offers instant websites with 24/7 updates - aiming to replace web agencies
- The Recording Academy Extends Invitation to The World's No.1 Superstar™—But He's Not Chasing the Award
- WonderDays Launches the UK's First AI Experience Gift Finder – Gifting Just Got So Much Easier!
- CelluHeal™ Launches Full Line of Advanced Wound Dressings for Online Purchase in the USA, Canada, and Beyond
Finally, when small FINRA firms are trying to keep data compliance costs as low as possible to avoid those nasty fines, there must be seamless checks in place to make sure no gaps appear as the firm grows. For example, when a new employee is added, any files that they create will automatically be captured in the 17a-4 archive, this applies to their email as well. Incidentally, the best way to accomplish this is using the cloud because archiving software can automatically detect new sites, folders, or email accounts within cloud services: another great reason to move your office to the cloud since this option isn't available with in-house email or file storage systems.
About AdvisorVault:
AdvisorVault is the only designated third party focusing on solving the data archiving demands of SEC rule 17a-4. Our service is designed specifically for small firms that need one vendor to help them satisfy today's demands surrounding data archiving and supervision. We have created a centralized archiving option that captures data and emails no matter where they are stored - in-house or in the cloud: total peace of mind - out of the box.
AdvisorVault Contact:
Allan Lonz, President
alonz@advisorvault.org
www.advisorvault.org
Direct: 416-985-0310
Toll-free: 1-866-732-1407 ex 1
Source: AdvisorVault
0 Comments
Latest on EntSun News
- Opteamix Launches StackRewrite.AI to Transform Enterprise Legacy Modernization
- Planet Maldek: Watcher Files Unseals Explosive New Theory About Mars' True Origins
- DatsJustice Ignites the Industry with New Single "Dead Or Alive" & Announces 2025 Tour Kickoff
- "The Pornified Generation": Dr. Chris Samuels Exposes the Toxic Alliance Between Bro Culture and Pornography That's Rewiring a Generation
- Meet a Scientologist Builds Aussie Dreams with Mike and Jonny Hibbard
- Overwhelmed: Rick Denzien's Stark and Stirring Climate Anthem
- The 2025 ESPY Awards After Party- Presented by Poppi & High Noon
- The Modern Insurance Store Expands Medicare Help Services for Seniors in Cincinnati
- Ironside HR Named Fastest-Growing Staffing Firm for Second Year
- Inframark Continues to Build Its Community Management Capabilities and Multi-Disciplinary Presence in Arizona
- ICAST 2025: The Crystal-Clear Revolution Begins at Booth #3233
- Brindle Pet Supplies Now Carries Badlands Ranch Dog Food in Canada
- $10 Million Allocated to Establish Crypto Treasury Focused on High Value Ethereum (ETH) & Bitcoin (BTC) as Long-Term Holdings for Cybersecurity Leader
- Sing For Your Supper: A Night of Musical Comedy and Drag for a Great Cause
- Cummings Graduate Institute for Behavioral Health Studies Celebrates New DBH Graduates
- $100 to $200 Million Equity Agreement with Top Digital Advisor Bitwise to Power Major Digital Asset Initiative for Bitcoin and Solana: OFA Group
- InSpired Brings World Premiere to the Weinberg Center This October
- New Collaboration Launches Corporate ESG Solution for Responsible Decommissioning and Transparent Reporting
- SlickCashLoan Launches Free Loan Calculator to Help You Plan Monthly Payments
- Hot New Fantasy Series Alert: The Key to Wonderland Captivates Readers with Dark Magic and Twisted Romance