ESMA launches CSA on CASPs' digital operational resilience for custody

The European Securities and Markets Authority (ESMA) has announced it is launching a common supervisory action (CSA) on the digital operational resilience of crypto-asset service providers (CASPs), with a particular focus on custody services. The CSA will assess the maturity of CASPs' operational resilience frameworks in relation to custody activities, focusing on risks inherent to distributed ledger technology (DLT). These include governance arrangements, key and storage management, transaction controls, incident detection and response, smart contract risks, and reliance on third-party providers.

National competent authorities will conduct the review on a risk-based sample of authorised CASPs between the second half of this year and the first half of 2027. ESMA will consolidate the findings into a final report for its board of supervisors following completion of the exercise in the second half of 2027.

Return to main website.