The U.S. Securities and Exchange Commission slapped the parent company of the New York Stock Exchange with a $10 million penalty Wednesday, saying it failed to comply with a rule requiring securities exchanges to immediately notify the agency of cyber intrusions.

Receiving immediate notification is critical because of the potential that the SEC would need to step in to protect markets, Gurbir Grewal, director of the agency’s division of enforcement, said in a statement.