Regulatory Alerts2026-06-02
Added · Updated
Code of Practice Pursuant to the Protection of Critical Infrastructures (Computer Systems) Ordinance for Authorized Institutions Designated as Critical Infrastructure Operators
The Monetary Authority issued this Sectoral Code of Practice to provide practical guidance for Authorized Institutions designated as Critical Infrastructure Operators under the Protection of Critical Infrastructures (Computer Systems) Ordinance. The document mandates specific obligations including the designation of Critical Computer Systems, maintenance of a Hong Kong office, notification of operator changes, and the establishment of a computer-system security management unit. It further requires Designated AIs to implement comprehensive security management plans, conduct regular risk assessments, and arrange for security audits to protect critical infrastructure against cyber threats.
More like this from HKMA
HKMA published 11 documents in the last 30 days. We email you each new one the day it's published.