Taiwan FSC Lowers Insurers’ CISO Threshold to NT$300 Billion

Taiwan’s Financial Supervisory Commission launched its Financial Cybersecurity Action Plan 2.0 on December 27, 2022, initially requiring insurers with at least NT$1 trillion in total assets in the previous year to appoint a chief information security officer. As online insurance sales and digital services expand, policyholder data, transaction systems and operational resilience face greater risks, prompting the regulator to broaden governance responsibilities.

On May 26, 2026, the FSC issued amendments to the Regulations Governing Implementation of Internal Control and Auditing Systems of Insurance Enterprises, lowering the threshold to NT$300 billion in total assets in the previous year and adding a separate benchmark of NT$500 million in online insurance premium income. Insurers meeting either condition must appoint a CISO. The rules are expected to cover seven additional life and non-life insurers, which must complete the changes by December 31, 2027, at the latest.