Chief information security officer appointment separates cybersecurity oversight from technology leadership and requires direct reporting to the chief executive.

Regulation 63C requires each recognised market infrastructure institution to appoint a chief information security officer separately and in addition to a chief technology officer. The chief information security officer oversees the institution's cyber security posture and reports directly to the managing director or chief executive officer. The requirement took effect from 1 November 2024.

---

---

---