Board Responsibilities

The success of a Crypto-Asset Service Provider (CASP) depends not only on innovative technology but also on effective corporate governance. Directors are responsible for setting the strategic direction of the organisation, overseeing risk management, ensuring compliance with applicable legislation and promoting reliable financial reporting.

As the digital asset sector continues to mature under the European Union's Markets in Crypto-Assets Regulation (MiCA), expectations regarding governance have increased significantly. Investors, regulators, banking institutions and other stakeholders expect CASPs to demonstrate sound governance, transparent decision-making and robust internal controls.

While management is responsible for the day-to-day operation of the business, the board of directors retains ultimate responsibility for oversight. An effective board helps ensure that the organisation operates responsibly, maintains reliable accounting records and prepares financial statements that comply with the applicable financial reporting framework.

Our firm provides statutory audit services to Cyprus Crypto-Asset Service Providers and blockchain businesses, supporting directors through independent assurance while recognising the unique governance challenges associated with digital assets.

Corporate governance establishes the framework through which an organisation is directed and controlled.

Strong governance promotes:

Good governance is particularly important in the digital asset sector, where businesses often operate within rapidly changing technological and regulatory environments.

Although operational responsibilities are delegated to management, directors remain responsible for overseeing the organisation.

Typical board responsibilities include:

The board should receive timely and reliable information to support informed decision-making.

Directors are responsible for ensuring that annual financial statements are prepared in accordance with the applicable financial reporting framework.

This includes responsibility for:

The statutory auditor provides an independent opinion on those financial statements but does not assume management's responsibilities.

The board should ensure that management establishes internal controls appropriate to the nature and complexity of the business.

Areas requiring oversight typically include:

Periodic reporting from management assists directors in assessing whether controls remain effective.

Every CASP faces strategic, financial, operational and regulatory risks.

The board should ensure that management identifies, evaluates and monitors risks relating to:

Risk management should form part of regular board discussions rather than being considered only during periods of difficulty.

Boards should understand how digital assets are acquired, safeguarded and recorded.

Key governance questions include:

• Who approves new wallets?
• Who controls private keys?
• Are wallet inventories maintained?
• How are client assets distinguished from company assets?
• How are wallet balances reconciled?
• What authorisation is required for transfers?
• Are multi-signature arrangements appropriate?
• How are custody providers monitored?

Although directors need not be blockchain specialists, they should understand the governance framework surrounding digital assets.

Technology is central to the operations of every blockchain business.

The board should receive regular reporting regarding:

Technology governance should be integrated into the organisation's broader risk management framework.

Directors should establish governance arrangements supporting compliance with applicable legal and regulatory obligations.

This includes oversight of:

Compliance should be viewed as an ongoing governance responsibility rather than a periodic administrative exercise.

Larger organisations may establish an audit committee or assign equivalent responsibilities to the board.

Typical responsibilities include:

Even where no formal audit committee exists, these responsibilities remain important.

Board minutes and supporting papers provide evidence of governance, oversight and significant decisions. They also assist directors in demonstrating that appropriate matters have been considered and approved.

Strong corporate governance is one of the defining characteristics of successful Crypto-Asset Service Providers. As the regulatory environment continues to evolve, organisations that invest in effective governance, transparent financial reporting and sound risk management are better positioned to earn the confidence of regulators, investors, banking partners and clients.

Our firm provides statutory audit services to Cyprus Crypto-Asset Service Providers and other blockchain businesses, combining expertise in International Standards on Auditing, IFRS Accounting Standards and blockchain technology. Through independent assurance and a risk-focused audit approach, we support directors in meeting their governance responsibilities while enhancing confidence in the organisation's financial reporting.