Which of the following statements is true regarding a member firm’s business continuity plan?

A member firm must disclose to customers at account opening how its business continuity plan addresses the possibility of a significant business disruption. The disclosure is designed to inform customers how the firm plans to respond if critical operations are interrupted. It generally addresses matters such as data backup, alternate communications, mission-critical systems, financial and operational assessments, and customer access to funds and securities. Choice D is correct because it accurately states both the timing and purpose of the required disclosure. Choice A is incorrect because the firm is not required to provide the full BCP to FINRA annually in the manner stated. Choice B is incorrect because the rule does not require annual delivery of the full BCP to every customer. Choice C is incorrect because if a firm has a website, disclosure rules may apply to posting, but every firm is not required to maintain a website solely for this purpose. The SIE outline includes business continuity plans as a books and records and customer protection topic and lists FINRA Rule 4370. Reference: Section 3.2.4 Books and Records and Privacy Requirements; FINRA Rule 4370.