Hong Kong's Office of the Commissioner of Critical Infrastructure has issued a Code of Practice under the new cybersecurity Ordinance, effective January 1, 2026. This document outlines specific compliance requirements for critical infrastructure operators, shifting from general principles to actionable steps for cybersecurity governance and incident response.