ISO TR 23576
Blockchain and distributed ledger technologies — Security management of digital asset custodians
| Organization: | ISO |
| Publication Date: | 1 December 2020 |
| Status: | active |
| Page Count: | 42 |
| ICS Code (IT applications in banking): | 35.240.40 |
| ICS Code (IT applications in other fields): | 35.240.99 |
| ICS Code (IT Security): | 35.030 |
scope:
This document discusses the threats, risks, and controls related to:
- systems that provide digital asset custodian services and/or exchange services to their customers (consumers and businesses) and management of security when an incident occurs;
- asset information (including the signature key of the digital asset) that a custodian of digital assets manages.
This document is addressed to digital asset custodians that manage signature keys associated with digital asset accounts. In such a case, certain specific recommendations apply.
The following is out of scope of this document:
- core security controls of blockchain and DLT systems;
- business risks of digital asset custodians;
- segregation of customer's assets;
- governance and management issues.
Document History