Top

Korbit Passes Post-Audit for ISMS-P and ISO Certifications

Web3 & Enterprise·September 06, 2023, 8:11 AM

South Korean crypto exchange Korbit announced on Wednesday that it has successfully passed a post-audit to maintain its Personal Information and Information Security Management System (ISMS-P) certification and four different International Organization for Standardization (ISO) certifications — ISO 27001, ISO 27017, ISO 27018, and ISO27701.

“By maintaining our ISMS-P and ISO certifications this year, we were able to reaffirm the stability and trustworthiness of Korbit’s personal information protection capabilities and security management system,” said Oh Se-jin, CEO of Korbit.

Photo by FLY:D on Unsplash

 

Rigorous criteria

The ISMS-P is a security management system jointly operated by the Ministry of Science and ICT and the Personal Information Protection Commission, representing the highest level of security management in Korea. It combines 80 requirements for Information Security Management System (ISMS) certification and 22 requirements for Personal Information Management System (PIMS) certification, totaling 102 requirements that must be met. Once obtained, certification is valid for three years, and annual post-audits are required to maintain its validity.

Korbit first obtained ISMS-P certification in September of 2021 and has once again passed this year’s post-audit that was conducted last Wednesday.

 

Meeting international standards

In addition, the exchange had previously passed post-audits for four ISO certifications related to information protection and personal information management systems earlier in June. This includes ISO 27001 for information security management systems, ISO 27017 for information security controls on cloud services, ISO 27018 for protection of personally identifiable information (PII) in public clouds, and ISO 27701 for privacy information management systems.

This achievement demonstrates Korbit’s commitment to reliability and security when operating and managing exchange services.

“As a crypto exchange, we will continually focus on strict security management to ensure the protection of customer information and assets,” said CEO Oh.

More to Read
View All
Web3 & Enterprise·

Nov 15, 2023

Crypto.com’s Dubai-based subsidiary secures crypto license

Crypto.com’s Dubai-based subsidiary secures crypto licenseCRO DAX Middle East, the Dubai-based subsidiary of Singapore-headquartered cryptocurrency exchange platform Crypto.com, has achieved a significant milestone by obtaining a license from the emirate’s Virtual Assets Regulatory Authority (VARA) to provide specified virtual asset services.Photo by Timo Volz on UnsplashExpanding product offering in DubaiThe approval, announced by the firm via a press release published to its website on Tuesday, marks a pivotal moment for the Singapore-based Crypto.com, allowing it to offer regulated virtual asset services in Dubai, including exchange services, broker-dealer services, management and investment services as well as lending and borrowing services.The virtual assets service provider (VASP) license is contingent upon CRO DAX Middle East meeting specific conditions and localization requirements outlined by VARA. Once these conditions are satisfied and the operational approval notice is received from the regulator, the company will be poised to commence operations. These services will be made accessible to both retail and institutional users through Crypto.com’s app and exchange platform.Kris Marszalek, CEO of Crypto.com, expressed his enthusiasm for Dubai’s regulatory approach, stating: “Dubai continues to show it is a leading market when designing effective regulation for the crypto space while still supporting adoption and innovation.”Dubai’s virtual asset sector developmentThe regulatory framework for virtual assets in Dubai was established under the Dubai Virtual Asset Regulation Law in March 2022, leading to the creation of VARA. Sheikh Mohammed bin Rashid, Vice President and Ruler of Dubai, founded VARA with the aim of developing an advanced legal framework to safeguard investors. Furthermore, the objective was to set international standards for the governance of the virtual asset industry, while fostering responsible business growth.VARA issued regulations in February to provide clarity and certainty on the expected level of operator responsibility and to mitigate market risks. This move aligns with the broader context of global cryptocurrency regulations, aiming to create a safe environment for investors in the wake of recent collapses of major platforms.Crypto.com is working to become one of the first virtual asset exchanges to implement its VASP license in accordance with VARA’s specialized regulations issued earlier this year. The company had previously received its minimum viable product provisional license in June 2022 and the MVP preparatory license in March of the current year. The operational license, which follows the preparatory and provisional stages, grants virtual asset service providers permission to conduct activities in seven specified categories.Adapting to the marketThe company has also been working on licensing in other markets. In Singapore, where it is headquartered, the company received a Major Payment Institution (MPI) trading license from the Monetary Authority of Singapore (MAS) in June. The company has also re-calibrated its offering based on market shifts. Earlier this year, it halted its institutional exchange service in the United States due to a downturn in institutional demand stateside.In March 2022, Crypto.com declared Dubai as its regional hub for the Middle East and North Africa (MENA), solidifying its commitment to expanding its presence and contributing to the growth of the cryptocurrency ecosystem in the region.

news
Policy & Regulation·

Jul 18, 2024

Hong Kong advances to prepare stablecoin legislation

Financial regulators in Hong Kong are moving towards the presentation of stablecoin legislation following the completion of a consultation process. In February of this year, that consultation process, which received 108 submissions from professional bodies and industry stakeholders, was completed. It was run jointly by The Financial Services and the Treasury Bureau (FSTB) and the Hong Kong Monetary Authority (HKMA), culminating in the publication of the results of the process.Photo by Pat Whelen on UnsplashLegislative proposal publishedOff the back of that prior body of work, the regulators have now published a legislative proposal, incorporating responses to issues that were brought to light via the consultation process. The regulators concluded that going forward, stablecoin regulation should be considered primarily in terms of those stablecoin assets which operate on a ledger which runs on a decentralized basis. Additionally, no individual or unilateral entity should have the ability to tamper with or control those assets or the network upon which they exist. On this basis, the regulators intend to submit a bill relative to fiat-referenced stablecoins for consideration to the Legislative Council at a later stage in 2024. Before submitting any legislative proposal, the regulators plan to once again consult with stakeholders prior to finalizing any such proposal. As part of what they have set out thus far, regulators are looking to include a requirement for any stablecoin issuer to obtain a license in Hong Kong.  Reserve asset requirementsThey remain open to the idea that reserve assets backing an issued stablecoin could be held in an overseas jurisdiction. However, if the issuer is an overseas entity, it will be required to establish a local corporate entity in Hong Kong, with relevant management personal based within the Chinese autonomous territory. In light of feedback received during the consultation process, the regulator is looking at reducing the attestation frequency that each stablecoin issuer will be required to provide via an independent auditor in order to verify that the stablecoins issued are backed by the requisite amount of liquid assets.  Such reserve assets must be segregated from the working capital of the stablecoin issuer’s business, with the HKMA expressing a preference for a trust-like structure following input via the consultation process. Furthermore, reserve assets must be deemed to be both high quality and highly liquid, which would include cash, bank deposits and government issued securities where counterparty risk is minimized. On the basis that the Hong Kong dollar is pegged to the U.S. dollar, the regulator is content to allow issuers to use USD-denominated reserve assets if they prefer to do so. The legislative proposal also stipulates the need for issuers to have a minimum share capital of HK$25 million or 1% of the value of stablecoin in circulation.  The HKMA foresees crypto exchanges, securities firms and regulated banks having the ability to offer stablecoins to customers, so such offerings won’t be confined to dedicated stablecoin issuers.Back in March the HKMA introduced a stablecoin sandbox with a view towards learning what works best from a regulatory standpoint. It’s understood that a list of participants will be announced in the near future. Participating entities will be able to issue stablecoins in Hong Kong within that controlled sandbox environment, prior to full scale implementation once stablecoin regulation has been fully legislated for.

news
Policy & Regulation·

May 31, 2023

UAE Issues New Guidance on Crypto AML Measures

UAE Issues New Guidance on Crypto AML MeasuresUnder new guidance issued by the Central Bank of the United Arab Emirates (UAE), crypto businesses will be subject to strengthened anti-money laundering (AML) and countering the financing of terrorism (CFT) measures.Photo by Joshua Miranda on PexelsTightening AML regulationThe guidance, first compiled in February but released on Wednesday, which takes into account the recommendations of the Financial Action Task Force (FATF), has been introduced to enhance the supervisory and regulatory frameworks and combat financial crimes. The rules are set to come into effect within a month.The Central Bank’s guidance specifically targets Licensed Financial Institutions (LFIs) in the UAE, encompassing banks, finance companies, exchange houses, payment service providers, registered hawala providers, insurance companies, agents, and brokers. These entities will now be required to comply with the new regulations to prevent money laundering and terrorism financing activities.Firm foundationsIn a written statement, His Excellency Khaled Mohamed Balama, Governor of the UAEs Central Bank, expressed the importance of the new guidance in strengthening efforts to combat financial crimes. He emphasized the commitment to protecting the financial and monetary system’s soundness and stability, aligning with the FATF standards.The issuance of the guidance comes as the UAE aims to attract crypto businesses to the region by offering a welcoming but effective regulatory framework. In March, Dubai unveiled a dedicated agency responsible for virtual asset regulation, signaling its commitment to fostering a favorable environment for crypto-related activities. Its Virtual Assets Regulatory Authority (VARA) has also taken action against what it deems to be unregulated activity in the crypto space recently.That action together with the approaches taken by Abu Dhabi and at a national level the UAE itself with respect to digital asset licensing is indicative of a territory that is setting out the right foundation upon which to develop the innovative sector. The approach taken by regulators in the UAE has garnered praise from major crypto firms, including Coinbase, who have applauded the region’s proactive stance on regulation.The strengthened regulatory framework is expected to contribute significantly to the UAE’s ongoing efforts to prevent money laundering and the financing of terrorism. By implementing these measures, the UAE aims to safeguard the integrity and stability of its financial and monetary systems while fostering a secure environment for crypto businesses to thrive.Global regulatory effortsThe UAE’s AML guidance comes amid ongoing efforts globally to come to terms with virtual assets. Tomorrow Japan will implement its adherence to the FATF travel rule regulation relative to digital assets. Crypto businesses like bitFlyer are already adjusting to that eventuality, while also implementing a similar standard in international markets.As the UAE continues to position itself as a leading hub for the crypto industry, the introduction of these new AML rules demonstrates its proactive approach to regulation. The collaboration between the Central Bank and other global regulatory bodies, such as the FATF, showcases the UAE’s commitment to international cooperation and the sharing of knowledge and best practices in the ever-evolving crypto landscape.

news
Loading