Annex
MiCA Implementation Annex
This annex describes how an entity in scope of the EU Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114, "MiCA") can use the core GRC library to implement its obligations as an issuer of asset-referenced tokens, an issuer of e-money tokens, or a crypto-asset service provider. The annex maps the library to MiCA's structure by crypto-asset category and by service, identifies the supervisory artefacts MiCA requires, and notes the phased application timeline.
- Type
- Annex
- Version
- 0.3.8
- Date
- 2026-10-01
- Owner
- Chief Compliance Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Compliance: Sector-Specific
- Review frequency
- Annual and upon material MiCA Regulatory Technical Standards (RTS), Implementing Technical Standards (ITS), or supervisory guidance change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Applicability triggers
- Application timeline
- The three crypto-asset categories (the classification gate)
- Title II: offers of crypto-assets other than ART or EMT (Arts 4-15)
- Title III: asset-referenced tokens (Arts 16-47)
- Title IV: e-money tokens (Arts 48-58)
- Title V: crypto-asset service providers (Arts 59-85)
- Title VI: market abuse (Arts 86-92)
- Supervisory architecture (Title VII)
- Held MiCA technical standards (RTS and ITS) map
- Library gaps requiring additional documentation
- Framework alignment
- Limitations
Frameworks it maps to
- MiCA
- MiCA RTS and ITS
- DORA
- Directive 2009/110/EC (EMD2)
- Directive (EU) 2015/849 (AMLD)
- ISO/IEC 27001:2022
Related documents
- compliance/
README.md (opens in a new tab) source - Legal and Regulatory Compliance Policycompliance
- Global Regulatory Applicability Registercompliance
- Financial Services Sector GRC Requirements Annexcompliance
- Enterprise Risk Management Standardrisk
- Third-Party and Supply Chain Risk Standardrisk
- Business Continuity and Resilience Frameworkresilience
- Security Incident Response Proceduresecurity
- Supplier Security and Privacy Assurance Standardsupply-chain
- DORA Implementation Annexcompliance
Next
All Documents