The Securities and Exchange Commission has been conducting “sweep” examinations of financial services firms to determine whether their procedures to prevent identity theft are adequate.