Hong Kong’s Critical Infrastructure Bill, passed in March 2025, establishes a mandatory cybersecurity framework for operators in sectors like energy, transport, banking, healthcare, and IT. It requires local presence, system resilience, and incident response, with obligations such as setting up security units, conducting annual risk assessments, and reporting incidents promptly. Non-compliance carries fines up to HK\$5 million. The bill shifts organizations from voluntary practices to enforceable accountability, emphasizing identity and access security. CyberArk supports compliance by providing AI-powered identity security, least privilege enforcement, automated audits, and incident response capabilities.

Join for free to read