PD ISO/TR 23576:2020

This standard PD ISO/TR 23576:2020 Blockchain and distributed ledger technologies. Security management of digital asset custodians is classified in these ICS categories:

• 35.030 IT Security
• 35.240.40 IT applications in banking
• 35.240.99 IT applications in other fields

This document discusses the threats, risks, and controls related to:

• systems that provide digital asset custodian services and/or exchange services to their customers (consumers and businesses) and management of security when an incident occurs;

• asset information (including the signature key of the digital asset) that a custodian of digital assets manages.

This document is addressed to digital asset custodians that manage signature keys associated with digital asset accounts. In such a case, certain specific recommendations apply.

The following is out of scope of this document:

• core security controls of blockchain and DLT systems;

• business risks of digital asset custodians;

• segregation of customer’s assets;

• governance and management issues.