The U.S. Securities and Exchange Commission censured broker-dealer OTC Link LLC and imposed a USD 575,000 civil penalty for failing to establish, maintain and enforce required Regulation Systems Compliance and Integrity policies and procedures for its OTC Link alternative trading system. The violations persisted from August 2016 through March 2025 and covered system security, access controls, application vulnerability management, testing and remediation. SEC examinations repeatedly identified policies that were missing, remained in draft form or were not enforced, but OTC Link failed to promptly correct the deficiencies. The SEC found violations of requirements governing systems capacity, integrity, resiliency, availability and security, as well as periodic policy reviews and remediation. Without admitting the findings, OTC Link agreed to the censure and a cease-and-desist order. After retaining third-party compliance consultants in 2024, the firm established additional required policies beginning in March 2025.