How do Small FINRA Firms Outsource 17a-4 Electronic Records Archive?
Since FINRA realizes small FINRA firms don’t have the IT budgets to perform the archiving of electronic records themselves, they are allowed to outsource this to a designated third party, however before doing so, firms, especially broker-dealers need to understand a few important features of SEC rule 17a-4.
Firstly, 17a-4 requires that firms keep secondary copies of data in a geographically separate location. It doesn’t matter if this data resides on systems at head office, on mobile devices or in the cloud, an automated process needs to be put in place to properly protect electronic records and communications. The best method for small broker-dealers and registered investment advisors is to use a provider that offers Remote Data Archiving.
Secondly, rule 17a-4 demands that firms archive email as well as other communications, similarly to data contained in books and records, this needs to be kept for 7 years in its original format. For small firms, the Store and Forward is the best way to make sure this information is kept compliant. The Store and Forward method, captures communications before they reach a firms’ systems, whether it’s Stored on corporate systems, mobile devices or in the cloud.
And lastly, rule 17a-4 asks firms to put in place a disaster recovery plan. This is critical, particularly for small broker-dealer firms and as such its ideal they use the same provider who is acting as the D3P and the electronic records archiving provider to help with recovery of data or systems. Therefore , they need to make sure the provider has the features in their software to perform a full backup image of server and pc disk drives and save them remotely with the ability to perform incremental snapshots thereafter for point-in-time full restores back to original hardware or dissimilar systems.