Thailand’s Securities and Exchange Commission (SEC) has provided an update on its monitoring of overseas cyber threats, urging capital and digital asset market operators to strengthen safeguards and report the actions taken in response to its alert. The expectations extend to the Stock Exchange of Thailand (SET) and companies in the SET Group. Operators must strictly comply with cybersecurity requirements and maintain readiness to respond to threats that could disrupt critical systems, services and investors.

The update follows a circular sent on Nov. 3, 2026, calling on supervised operators to strengthen cybersecurity monitoring, review existing safeguards and prepare incident responses proportionate to their risks. Boards and senior executives share responsibility for managing information technology and cyber risks rather than leaving them solely to the information technology function. Their responsibilities include setting direction, allocating resources, monitoring control effectiveness and ensuring timely correction of deficiencies. The SEC already has procedures for assessing incident severity, coordinating with relevant agencies and responding to incidents, and will assess whether further measures are needed.