[{"data":1,"prerenderedAt":91},["ShallowReactive",2],{"news-\u002Fnews\u002Fcayman-cybersecurity-rule-update-vasps":3},{"id":4,"title":5,"author":6,"authorTitle":7,"authorUrl":8,"body":9,"canonical":8,"category":43,"date":44,"description":45,"draft":46,"extension":47,"faqs":48,"findingsSource":8,"geo":58,"image":60,"industries":61,"keyFindings":8,"meta":64,"modified":65,"navigation":66,"path":67,"pullquote":8,"recommendations":8,"references":68,"related":72,"seo":79,"seoTitle":80,"signposts":8,"slug":81,"stats":8,"stem":82,"tags":83,"tldr":89,"__hash__":90},"news\u002Fnews\u002Fcayman-cybersecurity-rule-update-vasps.md","Cayman Extends Its Cybersecurity Rule to Virtual Asset Service Providers","ArcQubit Team","",null,{"type":10,"value":11,"toc":39},"minimark",[12,17,24,27,30,33],[13,14,16],"h2",{"id":15},"cayman-extends-its-cybersecurity-rule-to-virtual-asset-service-providers","Cayman extends its cybersecurity rule to virtual asset service providers",[18,19,20],"p",{},[21,22,23],"strong",{},"14 APRIL 2023, GEORGE TOWN",[18,25,26],{},"The Cayman Islands extended its cybersecurity rule to virtual asset service providers on 14 April 2023. The move brought VASPs under the same cybersecurity expectations as other regulated entities, broadening the rule's scope to cover the digital asset sector. It signalled that the jurisdiction treats virtual asset businesses as subject to the same baseline security obligations.",[18,28,29],{},"Extending a rule is a beginning rather than an end. A 2025 review found gaps that remained to be addressed, which shows supervisors expect to refine expectations as they see how firms implement them. The review turned the initial extension into an ongoing process of tightening, rather than a one-time change that settled the matter.",[18,31,32],{},"Cybersecurity obligations connect naturally to quantum risk. The rule covers the protection of systems and data, which depends on cryptography, so quantum-vulnerable algorithms fall within its concern as the threat grows. VASPs under the rule have a basis to treat quantum risk as part of the cybersecurity obligations they already must meet.",[18,34,35,38],{},[21,36,37],{},"Why it matters."," Cayman's extension of its cybersecurity rule to VASPs placed digital asset firms under a recognised security baseline, and the 2025 review shows the regulator intends to keep refining it. Because the rule covers the cryptography protecting systems and data, it gives quantum risk a home among existing obligations. VASPs can address quantum readiness as part of meeting a cybersecurity rule that already applies to them.",{"title":7,"searchDepth":40,"depth":40,"links":41},2,[42],{"id":15,"depth":40,"text":16},"Policy","2023-04-14","The Cayman Islands extended its cybersecurity rule to virtual asset service providers in April 2023; a 2025 review found gaps still to be addressed.",false,"md",[49,52,55],{"q":50,"a":51},"What did Cayman's 2023 cybersecurity update do?","On 14 April 2023, the Cayman Islands extended its cybersecurity rule to cover virtual asset service providers. That brought VASPs under the same cybersecurity expectations as other regulated entities, broadening the rule's scope to the digital asset sector.",{"q":53,"a":54},"What did the 2025 review find?","A 2025 review found gaps that remained to be addressed. The finding shows that extending a rule to a new sector is a starting point, and that supervisors expect to refine expectations as they see how firms implement them in practice.",{"q":56,"a":57},"How does this connect to quantum readiness?","Cybersecurity rules cover the protection of systems and data, which depends on cryptography. As quantum-vulnerable algorithms become a concern, VASPs under the rule have a basis to treat quantum risk as part of the cybersecurity obligations they must meet.",[59],"george-town","\u002Fassets\u002Fog-default.png",[62,63],"Financial Services","Cross-Sector",{},"2026-08-19",true,"\u002Fnews\u002Fcayman-cybersecurity-rule-update-vasps",[69],{"label":70,"url":71},"Cayman Islands Monetary Authority, \"Rule and Statement of Guidance on Cybersecurity for Regulated Entities,\" Apr. 14, 2023.","https:\u002F\u002Fwww.cima.ky\u002F",[73,76],{"label":74,"url":75},"Cayman Moves Virtual Asset Service Providers to Licensing","\u002Fnews\u002Fcayman-moves-vasps-to-licensing",{"label":77,"url":78},"Bermuda's Digital Asset Licensees Grow to 49 Under Binding Cyber Rules","\u002Fnews\u002Fbermuda-digital-asset-licensees-grow-to-49",{"title":5,"description":45},"Cayman Extends Its Cybersecurity Rule to VASPs","cayman-cybersecurity-rule-update-vasps","news\u002Fcayman-cybersecurity-rule-update-vasps",[84,85,86,87,88],"digital assets","financial services","federal compliance","quantum readiness","for enterprises","The Cayman Islands extended its cybersecurity rule to virtual asset service providers in April 2023, and a 2025 review found gaps that remained to be addressed.","o-1CJUzeouoKN5xLqxVCuc1Al57Imk2lnfaSGXROas4",1792182887367]