As a counterpoint to all the negative comments here, it’s entirely possible the CTO knows it’s gonna take x time to get your company laptop, which precisely because it’s a regulated industry might mean days/weeks of you waiting around with nothing to do
In that situation it makes sense for you to bring a personal laptop which you can use to access non confidential stuff, you might not write any code in it and might just be given docs to read through