"If the rule is finalized as proposed, it would mean a radical shift in how the security rule is applied -- moving away from a flexible approach to account for the various types of regulated entities to a more rigid approach with some prescriptive, strict security requirements that could be difficult to fulfill.... [R]egulated entities might not have as much time as they desire from the final rule's publication date to come into compliance -- if finalized as proposed, entities would have just 240 days."  MORE >>