|
Article 23
|
A securities firm shall adopt an information security policy in accordance with applicable laws and regulations, its internal control systems, and its business needs, and the policy shall serve as a basis for evaluating risks and establishing various information security management mechanisms, to ensure the effectiveness of security measures for the offering and trading of security tokens.
|