The CBI's RSO is a direct statement of supervisory intent. This briefing covers all five focus areas, Finvisor's independent assessment, and the questions your Board, CEO, and Head of Compliance should be asking now.
The CBI's first dedicated CASP chapter signals a regulator in active supervisory build-out. Six focus areas, key messages mapped to MiCAR obligations, and questions for Board, CEO, and Head of Compliance.
The CBI's RSO is a direct statement of supervisory intent. This briefing covers all five focus areas, Finvisor's independent assessment, and the questions your Board, CEO, and Head of Compliance should be asking now.
The CBI's first dedicated CASP chapter signals a regulator in active supervisory build-out. Six focus areas, key messages mapped to MiCAR obligations, and questions for Board, CEO, and Head of Compliance.
The transitional period for crypto-asset businesses operating under national regimes ended 31 December 2025. Firms without MiCAR authorisation or a live application are now operating without regulatory cover. The CBI has a pipeline of applications and is running quarterly regulatory returns from Q1 2026.
DORA has been applicable since January 2025. Supervisors are moving from implementation guidance to active assessment. Key gaps we are identifying across client portfolios: incomplete Registers of Information, weak ICT incident classification, and insufficient third-party concentration analysis.
The CBI's introduction of a Pre-Approval Controlled Function for the Head of Safeguarding is one of the most significant governance changes in the 2026 RSO. Firms must assess whether their current safeguarding oversight meets the PCF standard before they are contacted.