Thus, the SCI industry standards would provide flexibility to allow each SCI entity to determine how to best meet the requirements in proposed Rule 1000(b)(1), taking into account, for example, its nature, size, technology, business model, and other aspects of its business, because compliance with SCI industry standards would not be the exclusive means by which an SCI entity could satisfy the requ