with the rules, conditions and procedures as specified in the Notification of the Office of the Securities and Exchange Commission by failing to conduct an assessment of information technology systems