According to the new requirements introduced by the Securities and Futures Commission (SFC) on reducing cybersecurity risk associated with Internet trading issued on October 27, 2017, additional controls are required over internet trading, including the implementation of two-factor authentication (2FA). In compliance with the guidelines, starting April 27, 2018, it will be a mandatory requirement for licensed corporations to implement two-factor authentication mechanism for clients logging into their internet trading accounts.