The Information Security Model Rule is a set of guidelines developed by NASAA to help securities regulators ensure that investment firms are protecting sensitive and confidential information of their clients from cyber-attacks and other security breaches. The rule requires investment advisers to adopt policies and procedures to safeguard their clients' personal information from theft, misuse, and unauthorized access.