SFC

September 25, 2026 | 21 min

Stage One Is a Tenant and Two Laptops: Building IT for a Newly Licensed Hong Kong Asset Manager

For the COO or operations lead at a newly licensed 3-15 person Hong Kong asset manager in a serviced office. Why the commercial clock and the regulatory clock cause most IT rebuilds; the smallest defensible stage-one set that lets you trade tomorrow; how to keep your own audit trail while staff work inside a partner's or administrator's environment; what the full licensed estate adds; what deliberately not to buy yet; and how each stage maps to the evidence regulators and auditors typically ask for.

July 14, 2026 | 14 min

Vulnerability Management vs. Penetration Testing: What APAC SMEs Actually Need

A practical guide for APAC SMEs on the difference between continuous vulnerability management and point-in-time penetration testing, when each is required by SFC, MAS, HKMA, or PCI-DSS, and how to decide which to invest in first.