In an era where cyber threats are expanding in scope and growing increasingly complex—ranging from attacks on information systems, unauthorized access to critical data, to causing damage to service systems,
these threats can have wide-ranging impacts on organizations, businesses, and the public, especially enterprises that rely on digital systems and hold important customer information under their care.
For the capital market and digital asset sectors, cybersecurity is a critical issue because any attack or system disruption could affect transactions, investor confidence, and business continuity for operators.
Recently, the Securities and Exchange Commission (SEC) has been closely monitoring cyber threat developments abroad that could continuously impact important systems and services. The SEC prioritizes preparedness of regulated businesses to effectively respond to potential threats, maintain service continuity, and reduce risks affecting investors and the capital market.
On 3 Nov 2026, the SEC issued a circular to regulated businesses, including stock exchanges and their affiliates, warning them to intensify cyber threat monitoring, review strategies, and enhance protective measures.
They were also urged to prepare adequately for potential incidents in accordance with their risk levels. Furthermore, the SEC emphasized that risk management of information technology and cyber threats is not solely the responsibility of IT departments.
Instead, it is the duty of the board of directors and senior executives of each organization to set directions, allocate resources, monitor control effectiveness, and ensure timely correction of deficiencies.
The SEC has established guidelines for managing cyber threat incidents affecting businesses, including processes for monitoring and assessing severity, coordinating among relevant agencies, and response protocols to ensure appropriate and sufficient actions depending on the situation.
Anek Yuyeun, Deputy Secretary-General and SEC Spokesperson, stated that the SEC closely follows developments in cyber threat situations and maintains continuous coordination with businesses and related agencies.
He added that the SEC recently reiterated the importance of strict compliance with cybersecurity rules and requirements to enable timely responses, ensure operational readiness against cyber threats, and minimize risks that could affect investors and services.
Businesses must report to the SEC on their measures to enhance cyber threat defenses as previously notified. Additionally, the SEC will continue to assess risks and consider the need for further measures appropriate to the evolving situation.
Read stock and investment news with Thairath Money to help you achieve “Good Finance, Good Life” athttps://www.thairath.co.th/money/investment
Follow the Facebook page: Thairath Money at this linkhttps://www.facebook.com/ThairathMoney