Tom Cotton actually said...

I think the current audit requirements are like trying to put a square peg into a round hole.

This requirement may seem harmless or obscure, but in fact it has increased the cost for small broker-dealers quite a bit.

the cyber threat is nearly unique among all threats that our companies and investors face.

In hindsight, I think Congress pretty clearly overshot the mark when they included small noncustodial firms.