For NFA regulated firms, perform a review and statement of the appropriateness of the firm’s Information Systems Security Program (ISSP). Click here for a 9070 self-assessment.