Chief information security officer required to assess and mitigate cybersecurity risks and implement security policies at exchanges. Recognised stock exchanges and clearing corporations must appoint a Chief Information Security Officer to assess, identify and mitigate cybersecurity risks and respond to incidents; the officer must establish appropriate standards and controls, direct implementation of processes and procedures per the governing board-approved cybersecurity and cyber resilience policy, and lead cybersecurity initiatives including planning, development, maintenance, review and implementation of Information Security Policies.