Preparing Your Crypto-Asset Service Provider (CASP) for Its First Statutory Audit

A Practical Guide for Directors, Finance Teams and Compliance Officers

For many Crypto-Asset Service Providers (CASPs), the first statutory audit represents an important milestone in the development of the business. Whether the organisation has recently obtained authorisation, expanded its operations or reached the stage where an independent audit is required, careful preparation can significantly improve the efficiency of the audit process.

Unlike many traditional businesses, CASPs operate within a technology-driven environment characterised by blockchain transactions, digital asset custody, evolving regulatory requirements and complex accounting considerations. These factors require management to maintain comprehensive accounting records, robust governance arrangements and effective internal controls throughout the financial year.

Preparing for a statutory audit should not begin shortly before year-end. Instead, it should form part of an ongoing governance and financial reporting process that enables management to produce reliable financial information while supporting the auditor's work.

Our firm specialises in the statutory audit of Cyprus Crypto-Asset Service Providers and other blockchain businesses, helping organisations prepare for their first audit with confidence while ensuring compliance with International Standards on Auditing (ISA) and applicable financial reporting requirements.

Why Preparation Matters

The quality of audit preparation has a direct impact on the audit process.

Well-prepared organisations generally experience:

  • fewer audit queries;

  • shorter audit completion times;

  • lower operational disruption;

  • stronger financial reporting;

  • improved governance;

  • more efficient communication with auditors; and

  • greater confidence among shareholders and regulators.

Conversely, incomplete documentation, poor reconciliations or unclear accounting policies frequently result in additional audit procedures and delays.

Understand Your Directors' Responsibilities

The statutory auditor is responsible for expressing an independent opinion on the financial statements.

Management and the board of directors remain responsible for:

  • preparing the financial statements;

  • maintaining adequate accounting records;

  • implementing effective internal controls;

  • safeguarding company assets;

  • selecting appropriate accounting policies;

  • complying with applicable legislation; and

  • assessing the entity's ability to continue as a going concern.

Understanding these responsibilities is an important first step in preparing for the audit.

Ensure Accounting Records Are Complete

Accurate accounting records form the foundation of every statutory audit.

Management should ensure that records are maintained throughout the year rather than being reconstructed after the reporting period has ended.

Typical records include:

  • general ledger;

  • trial balance;

  • bank reconciliations;

  • wallet reconciliations;

  • exchange statements;

  • customer invoices;

  • supplier invoices;

  • payroll records;

  • fixed asset registers;

  • tax records; and

  • supporting schedules for significant balances.

All material transactions should be supported by appropriate documentation.

Maintain a Complete Wallet Register

Blockchain businesses frequently operate numerous wallets across different blockchain networks.

A central wallet register should identify:

  • wallet addresses;

  • blockchain network;

  • business purpose;

  • ownership;

  • authorised users;

  • custody arrangements;

  • date established;

  • current status; and

  • associated accounting records.

The wallet register should be reviewed regularly to ensure completeness and accuracy.

Perform Regular Reconciliations

One of the most common causes of audit delays is incomplete reconciliation of digital asset balances.

Management should reconcile:

  • blockchain wallet balances;

  • exchange accounts;

  • custody reports;

  • accounting ledgers;

  • bank balances;

  • customer balances;

  • transaction reports; and

  • revenue records.

Reconciling throughout the year allows discrepancies to be identified and resolved promptly.

Review Accounting Policies

Management should document accounting policies covering all significant aspects of the business.

Examples include:

  • digital asset recognition;

  • valuation methodologies;

  • revenue recognition;

  • client asset accounting;

  • custody arrangements;

  • impairment assessments where relevant;

  • foreign currency translation;

  • capitalisation policies; and

  • financial statement disclosures.

Policies should be reviewed annually to ensure they remain appropriate for the entity's operations.

Organise Contracts and Legal Documentation

Auditors will frequently request supporting contractual documentation.

Management should maintain organised records of:

  • customer agreements;

  • custody contracts;

  • exchange agreements;

  • software licences;

  • service provider contracts;

  • loan agreements;

  • shareholder agreements;

  • significant commercial arrangements; and

  • board-approved policies.

Maintaining an electronic document repository can significantly improve audit efficiency.

Review Internal Controls

Before the audit begins, management should evaluate whether internal controls remain appropriate.

Areas to review include:

  • segregation of duties;

  • wallet administration;

  • approval limits;

  • access controls;

  • user permissions;

  • accounting system controls;

  • cybersecurity governance;

  • change management;

  • incident reporting; and

  • reconciliation procedures.

Weaknesses identified internally can often be addressed before the audit commences.

Prepare Supporting Schedules

Finance teams should prepare schedules supporting material balances within the financial statements.

Examples include:

  • digital asset holdings;

  • customer liabilities;

  • accounts receivable;

  • accounts payable;

  • accrued expenses;

  • deferred income;

  • fixed assets;

  • provisions;

  • related-party transactions; and

  • equity movements.

Supporting schedules reduce the number of audit requests during fieldwork.

Review Board Minutes

Board minutes often provide important audit evidence regarding significant decisions.

Management should ensure that minutes appropriately document:

  • major investments;

  • financing arrangements;

  • significant contracts;

  • digital asset acquisitions;

  • approval of accounting policies;

  • risk management decisions;

  • litigation matters;

  • regulatory developments; and

  • year-end financial reporting decisions.

Minutes should be approved and retained in accordance with the organisation's governance procedures.

Consider Going Concern

Directors are responsible for assessing whether the company is able to continue operating for the foreseeable future.

This assessment should consider:

  • available cash resources;

  • projected cash flows;

  • financing arrangements;

  • regulatory developments;

  • significant commercial risks;

  • litigation;

  • market conditions; and

  • business plans.

Supporting documentation should be available for the auditor's review.

Communicate with the Auditor Early

Early engagement with the audit team benefits both management and the auditor.

Discussions before year-end may include:

  • significant transactions;

  • new business activities;

  • changes in accounting policies;

  • acquisitions;

  • token issuances;

  • technology changes;

  • regulatory matters; and

  • expected audit timetable.

Early communication helps avoid unnecessary surprises during fieldwork.

Common Issues Encountered During First Audits

Many first-time audits identify similar challenges, including:

  • undocumented accounting policies;

  • incomplete wallet inventories;

  • unreconciled blockchain balances;

  • inadequate supporting documentation;

  • inconsistent revenue recognition;

  • weak segregation of duties;

  • poor document retention;

  • insufficient board documentation;

  • lack of formal internal control procedures; and

  • delays in responding to audit requests.

Most of these issues can be addressed through proper planning before the audit begins.

Preparing an Audit Information File

Many organisations prepare a year-end audit file containing key documentation.

Typical contents include:

  • financial statements;

  • trial balance;

  • reconciliation schedules;

  • wallet register;

  • bank confirmations;

  • exchange statements;

  • custody confirmations;

  • board minutes;

  • accounting policies;

  • contracts;

  • tax computations;

  • legal correspondence; and

  • management contact list.

Preparing this file in advance enables the audit to commence efficiently.

Benefits of Early Audit Preparation

Organisations that prepare throughout the year generally benefit from:

  • reduced audit disruption;

  • more efficient audit fieldwork;

  • improved financial reporting quality;

  • stronger governance;

  • earlier completion of the audit;

  • better communication with auditors; and

  • enhanced confidence among investors, lenders and regulators.

Audit preparation should therefore be viewed as an ongoing governance process rather than a year-end exercise.

Frequently Asked Questions

When should we begin preparing for the audit?

Preparation should begin from the start of the financial year. Maintaining complete accounting records, performing regular reconciliations and documenting significant transactions throughout the year makes the audit considerably more efficient.

Should we wait until year-end to prepare reconciliations?

No. Regular reconciliations throughout the year help identify issues promptly and reduce the workload during the audit.

What information will auditors request?

The information requested depends on the business. Typical requests include financial records, wallet reconciliations, contracts, accounting policies, board minutes, supporting schedules and documentation relating to significant transactions.

Can we discuss complex transactions before the audit?

Yes. Early communication allows management and the auditor to identify areas requiring additional documentation or technical analysis before fieldwork begins.

Does good preparation reduce audit costs?

Although every engagement is different, organised records, reliable reconciliations and timely responses generally enable the audit to proceed more efficiently.

Preparing for Success

A successful statutory audit begins long before the auditor arrives. By maintaining reliable accounting records, documenting accounting policies, strengthening internal controls and preparing supporting information throughout the year, directors can significantly improve both the efficiency and quality of the audit process.

Our firm provides statutory audit services to Cyprus Crypto-Asset Service Providers and other blockchain businesses. We work closely with management to ensure that organisations are well prepared for their statutory audit while maintaining the independence and professional objectivity required under International Standards on Auditing.

If your organisation is preparing for its first statutory audit under the MiCA regulatory framework, our experienced blockchain audit team would be pleased to discuss your requirements and explain how we can support your business through every stage of the audit process.