On 26 February 2025, the European Securities and Markets Authority (‘ESMA’) published the official translation of the guidelines on the specification of Union standards for the maintenance of systems and security access protocols for offerors and persons seeking admission to trading of crypto-assets other than asset-referenced tokens and e-money tokens. These guidelines have been issued on the basis of the delegation set out in Article 14(1) of the MiCA Regulation[1]. The guidelines cover the following aspects:
- general principle of proportionality;
- administrative arrangements concerning systems and security access protocols and roles and obligations of offerors or persons seeking admission to trading of crypto-assets other than asset-referenced tokens and e-money tokens;
- physical security access protocols;
- security access protocols for network and information systems;
- cryptographic key management.
The guidelines can be consulted at the following link:
https://www.esma.europa.eu/sites/default/files/2025-02/ESMA75-223375936-6132_Guidelines_on_maintenance_of_systems_and_security_access_protocols_under_MiCA.pdf
[1] Regulation (EU) 2023/1114 of the European Parliament and of the Council of 31 May 2023 on Markets in crypto-assets and amending Regulations (EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU and (EU) 2019/1937 (OJ L 150 9.6.2023, p. 40).