Regulatory Alerts2025-08-12
Added · Updated
Circular No. 22 of 2025 Digital AMC
The Securities and Exchange Commission of Pakistan mandates pre-qualification requirements for Digital Asset Management Companies and other Asset Management Companies utilizing digital platforms to obtain No Objection Certificates from trustees. These requirements enforce strict cybersecurity controls, including secure access management, network perimeter protection, data encryption, and incident response protocols, alongside mandatory cybercrime insurance. Specific obligations for smartphone applications include multi-factor authentication, session timeouts not exceeding thirty minutes, PII storage within Pakistan, and adherence to detailed mobile app security standards in Annexure A.
Topics
Share