the following matters: (1) sufficient financial resources for the conduct of and risks associated with its operations; (2) safety of its clients’ assets; (3) security measures against electronic crime