Regulatory Alerts2022-01-01
Virtual Asset and Initial Token Offerings Services (Cybersecurity) Rules 2022
The Financial Services Commission of Mauritius has issued the Virtual Asset and Initial Token Offerings Services (Cybersecurity) Rules 2022 to mandate comprehensive cybersecurity and operational risk management for all virtual asset service providers operating in or from the jurisdiction. These rules require providers to establish robust internal controls, secure data confidentiality and integrity, conduct annual external audits, maintain documented business continuity plans with tested alternative sites, and ensure active senior management oversight alongside staff training. Providers must submit annual cybersecurity and operational resilience reviews to the Commission, regularly update their frameworks in response to emerging cyber threats, and appropriately integrate insurance without compromising core system resilience.