State Securities Regulation of Investment Advisers (NASAA)
NASAA model rules adopted by state regulators for state-registered advisers and IARs: fiduciary conduct, custody, books and records, cybersecurity policies and IAR continuing education.
- Issued by
- NASAA / state securities regulators
- Applies in
- United States
- Edition
- NASAA model rules as amended 4 May 2026
- Area
- Investment & funds
What an assessor reads first.
The headline requirements in Amoreg’s catalogue, in the issuer’s own numbering where it has one. They are where a review starts, not a transcription of the text.
- 102(a)(4)-1/502(b)Avoid unethical practices: disclose conflicts, charge reasonable fees, advertise fairlyConduct
- 102(e)(1)-1/411(f)-1Notify the Administrator of custody and use a qualified custodian with safeguardsCustody
- 411(c)-1Make and keep required books and records, including advertising and cybersecurity recordsRecordkeeping
- P&PAdopt written policies incl. cybersecurity, privacy and business continuityCompliance
- Info securityAnnual review of physical and cybersecurity policies; deliver privacy policy annuallyCybersecurity
- 203(b)-1Deliver and update the Form ADV Part 2 brochureDisclosure
- IAR CEComplete 12 IAR continuing-education credits annually (6 ethics, 6 products & practice)Competence
- Min. financialMaintain minimum net worth or bond when holding custody or discretionFinancial resources
How Amoreg keeps you on it.
Enable the State Securities Regulation of Investment Advisers (NASAA) and add NASAA / state securities regulators’s pages as a monitor of your own. Every publication it records keeps its source, stage and date.
Inspector reads your policies against these 8 requirements every week and opens a finding wherever one falls short, citing the rule and drafting the fix. A person decides what is applied.
Each week
- Read NASAA / state securities regulators’s pages
- Check the library against 8 requirements
- Open findings with drafted fixes
- Wait for a person to decide
Policy does not yet set out: avoid unethical practices: disclose conflicts, charge reasonable fees, advertise fairly
- Rule
- State Securities Regulation of Investment Advisers (NASAA), 102(a)(4)-1/502(b)
- Area
- Conduct
- Proposed by
- Inspector
- Decided by
- A named person, once reviewed
The same ground, elsewhere.
- AIFMD (as amended by AIFMD II)Authorisation, delegation, liquidity management, loan origination and reporting for alternative investment fund managers.European Union · 6 controls
- UCITS DirectiveRetail fund product rules: eligible assets, diversification, depositary, KIID/KID and remuneration.European Union · 5 controls
- EMIR — European Market Infrastructure RegulationClearing, reporting and risk mitigation for derivatives.European Union · 3 controls
- SFDR — Sustainable Finance Disclosure RegulationEntity and product-level sustainability disclosures for financial market participants.European Union · 5 controls
- MiCA — Markets in Crypto-Assets RegulationAuthorisation and conduct for crypto-asset service providers and issuers.European Union · 4 controls
- Guernsey Protection of Investors Law & Collective Investment Scheme RulesLicensing and conduct for investment business and the rules for authorised and registered schemes.Guernsey · 4 controls
Also in United States
- US Bank Secrecy Act / FinCEN AML ProgramBSA AML programme requirements: the pillars, CDD rule, SAR/CTR reporting and beneficial ownership.United States · 6 controls
- OFAC Sanctions Compliance ProgramThe five essential components of an effective sanctions compliance programme.United States · 5 controls
- US Foreign Corrupt Practices ActAnti-bribery and books-and-records provisions, assessed against the DOJ's Evaluation of Corporate Compliance Programs.United States · 4 controls
- GLBA Safeguards RuleThe information security programme financial institutions must maintain for customer information.United States · 5 controls
- NIST Cybersecurity Framework 2.0Six functions for managing cybersecurity risk, now including Govern.United States / Global · 6 controls
- NYDFS Cybersecurity Regulation (23 NYCRR 500)Cybersecurity requirements for DFS-licensed entities, with CISO, MFA, annual certification and 72-hour notice.United States — New York · 6 controls
Questions
Does Amoreg watch for changes to the State Securities Regulation of Investment Advisers (NASAA)?
Enable it and add the issuer’s pages as a monitor of your own. Every publication the Monitor records keeps its source, stage and date.
Can Amoreg check our policies against the State Securities Regulation of Investment Advisers (NASAA)?
Yes. Inspector reads your library against its requirements every week and opens a finding, with the rule it cites and a proposed fix, wherever a policy falls short. A person decides what is applied.
Which edition does Amoreg use?
The catalogue records NASAA model rules as amended 4 May 2026. Editions were last verified in August 2026, and the Monitor records new publications as they appear.



















