Chief technology officer appointment: depositories must oversee technology, manage IT risk, and address audit findings. Every depository must appoint a chief technology officer responsible for overseeing technology system design, infrastructure and operations, managing risks across all IT functions, formulating an information technology policy and an IT Risk Management Framework, and resolving and mitigating observations arising from technology audits.