In an era where cyber threats are expanding and becoming more complex, including attacks on information systems, unauthorized access to critical data, or damage to service systems,
these can have widespread impacts on organizations, businesses, and the public, especially those relying on digital systems and handling important customer data.
In the capital market and digital asset sectors, cybersecurity is especially critical because attacks or system failures could affect transactions, investor confidence, and service continuity.
Recently, the Securities and Exchange Commission (SEC) has been monitoring cyber threat developments abroad that could continuously impact vital systems and services, emphasizing the preparedness of businesses under its supervision to handle potential threats, ensure service continuity, and reduce risks affecting investors and the capital market.
On 3 November 2026, the SEC issued a circular to regulated businesses, including stock exchanges and affiliated companies, warning them to intensify cyber threat monitoring and review and enhance defense measures.
They were also urged to prepare appropriate responses to potential incidents based on risk levels, with a reminder that boards and senior management must prioritize this and recognize that managing IT and cyber risks is not solely the responsibility of IT departments.
Instead, it is the duty of each organization’s board and senior executives to set direction, allocate resources, monitor the effectiveness of controls, and ensure timely correction of deficiencies.
The SEC has procedures for managing cyber incidents affecting businesses, including tracking and assessing severity, coordinating between relevant agencies, and response guidelines to ensure appropriate and adequate action according to the situation's level.
Anek Yuyuen, Deputy Secretary-General and SEC spokesperson, said the SEC closely monitors cyber threat developments and continuously coordinates with businesses and related agencies.
Recently, it has emphasized strict compliance with cybersecurity regulations to enable prompt responses and ensure systems are prepared to handle cyber threats and minimize risks impacting investors and services.
Businesses must report to the SEC on their upgraded cyber defense measures as previously advised. Furthermore, the SEC will continue assessing risks and consider the need to escalate measures suitably for the situation.
Read stock and investment news with Thairath Money to help you achieve "Good Finance, Good Life" athttps://www.thairath.co.th/money/investment
Follow the Facebook page: Thairath Money at this linkhttps://www.facebook.com/ThairathMoney