2025-02-26
Added · Updated
These guidelines specify Union standards for the maintenance of systems and security access protocols for offerors and persons seeking admission to trading of crypto-assets other than asset-referenced tokens and e-money tokens. They require these entities to establish adequate internal governance, physical and logical access controls, and cryptographic key management procedures proportionate to their size and risk profile. Competent authorities must notify ESMA within two months of publication regarding their compliance status, while the guidelines apply to market participants 60 calendar days after publication.