Cyber security obligations require capital market intermediaries to maintain robust resilience frameworks as specified by the regulator. A capital market intermediary must maintain a cyber security and cyber resilience framework meeting standards and specifications prescribed by the Authority under the International Financial Services Centres Authority (Capital Market Intermediaries) Regulations, 2025, as an ongoing obligation to ensure robustness against cyber threats and sustain operational resilience.