Thoughts on SEC/Voya Red Flag Rule Charges?

How are we feeling about the news with Voya and the SEC?

Summary of NYT article: The SEC filed charges against Voya Financial Advisors and hit them with a fine for "willfully neglecting to comply" with the "Identity Theft Red Flag Rule". First time in the law's 5-year history that it's been enforced.
**From the article: ** "The S.E.C.’s action should set off alarm bells for every financial firm and board of directors under the agency’s watch. Most companies are probably not in compliance with the rule and, given the agency’s increased focus on cybersecurity, they should move quickly to address any issues....Although the S.E.C. only hit Voya with a symbolic $1 million fine, it’s doubtful that the agency will be as forgiving in the future...The choice for investment firms and their boards is clear: Shore up identity theft programs or risk increasingly serious consequences."

https://www.nytimes.com/2018/10/08/business/dealb…

I'd love to especially hear from those of you currently working in some sort of associate or MD (and above) role, who this may have a bigger impact on.