On the 8th of July 2026, the European Securities and Markets Authority launched a Common Supervisory Action (CSA) to assess the maturity of crypto-asset service providers (CASPs)’ digital operational resilience frameworks in relation to custody activities. It will focus on risks inherent to distributed ledger technology (DLT), including, among others, governance arrangements, transaction controls, incident detection and response, and dependencies on third-party providers. National Competent Authorities (NCAs) will conduct the exercise on a risk-based example of authorised CASPs between the second half of 2026 and the first half of 2027.
NCAs’ findings will be consolidated into a final report which will be submitted to ESMA’s Board of Supervisors upon conclusion of the exercise.
