Two-factor authentication for internet trading required to strengthen client authentication and secure order transmission. Brokers must capture the IP address for all IBT/STWT orders, ensure high system availability, implement secure end-to-end encryption with mutual authentication, and protect systems against internal and external attacks. Systems should provide alternate authenticated communication channels upon failure, automatic logout for inactivity, and on-site plus remote backup and restore capabilities. Two-factor authentication, preferably PKI-based digital signatures from a government-certified agency with distinct factors, is recommended. Exchanges must monitor unauthorized access complaints, amend rules, notify members, disseminate the provisions, and report implementation status to the regulator monthly.