 While "the rule does not require the adviser to adopt a particular standard, the standard chosen must reflect the adviser's fiduciary obligations and those of its supervised persons, and must require compliance with [sic] securities laws.