Julia Leung: Hong Kong Securities and Futures Commission plans to develop a cybersecurity framework for licensed institutions
BIBIBI
AT A GLANCE
The Hong Kong Securities and Futures Commission plans to develop a cybersecurity framework for licensed institutions and raise requirements for high-risk institutions.
Article
【Julia Leung: Plans to develop a cybersecurity framework for licensed institutions】
Julia Leung, Chief Executive Officer of the Hong Kong Securities and Futures Commission, stated at Hong Kong FinTech Week 2026 that the Hong Kong Securities and Futures Commission plans to develop a cybersecurity framework for licensed institutions and impose higher requirements on higher-risk institutions to strengthen their ability to withstand AI driven cyber threats. Julia Leung also stated that Hong Kong institutions are at the forefront of tokenization, and that tokenization must deliver tangible economic benefits to the market in order to achieve scaled development.
Key points
01
Julia Leung, Chief Executive Officer of the Hong Kong Securities and Futures Commission, stated at Hong Kong FinTech Week 2026 that the Hong Kong Securities and Futures Commission plans to develop a cybersecurity framework for licensed institutions.
02
The Hong Kong Securities and Futures Commission plans to impose higher requirements on higher-risk institutions.
03
The relevant plan aims to strengthen institutions' ability to withstand AI driven cyber threats.
04
Julia Leung stated that Hong Kong institutions are at the forefront of tokenization.
05
She stated that tokenization must deliver tangible economic benefits to the market in order to achieve scaled development.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Simply put, the Hong Kong Securities and Futures Commission plans to establish a cybersecurity framework for licensed institutions and may impose stricter requirements on higher-risk institutions, with a focus on addressing AI driven cyber threats. The material also notes that tokenization must generate actual economic value before it is suitable for wider adoption.
Why it matters to readers
If the plan is subsequently implemented, licensed institutions may need to pay attention to cybersecurity requirements; tokenization businesses will need to demonstrate their actual economic benefits.
This means that financial institutions may face clearer cybersecurity requirements in the future, while tokenization projects cannot rely solely on concepts and must also demonstrate actual value.
Risks and unknowns
The material does not specify the detailed standards, scope of application, or implementation timeline for the cybersecurity framework.
The material does not specify how higher-risk institutions will be identified or what the higher requirements will be.
The material does not specify the detailed rules, projects, or arrangements for the scaled development of tokenization.
Related Developments
Loading event timeline…
Related concepts
Cybersecurity framework
This term is not in the glossary yet. Browse related concepts in the glossary.
