FINRA Requirements for financial institutions are very vague and subject to a lot of interpretation.  How does your firm meet FINRA requirements?  Are you storing all your SQL backup files on WORM storage?   Other financial reports on WORM?  How long?