Fidelio Tata, PhD⎢CASP MONITOR

CASP Know­ledge & Com­pe­tence Mo­ni­tor:
MiCA super­visory in­telli­gence for CASP com­pe­tence frame­works

This Moni­tor identi­fies ge­nuine­ly new re­gu­la­tory, su­per­vi­sory and mar­ket de­velop­ments relevant to know­led­ge and com­pe­tence frameworks for Cryp­to-Asset Ser­vice Pro­viders (CASPs) under MiCA. It covers ESMA and NCA publi­ca­tions, super­vi­sory practice, regulatory and aca­de­mic ana­lysis, competence and CPD offerings, and selected industry commentary where they go beyond the base­line estab­lished by ESMA’s Guide­lines ESMA35-24871704-2922 on know­led­ge and com­pe­ten­ce.

The Moni­tor focuses on de­velop­ments that affect how CASPs de­sign, evi­dence, main­tain and de­fend com­pe­tence frame­works across staff and ma­na­ge­ment func­tions in the con­text of authori­sa­tion and on­going super­vi­sion. It is de­sign­ed to support CASPs in alig­ning their com­pe­tence frame­works with emerg­ing super­vi­sory ex­pec­ta­tions, national im­ple­men­ta­tion prac­tices and evolving autho­ri­sa­tion and super­visiory expectations across EU juris­dic­tions.

The CASP Know­led­ge & Com­pe­tence Moni­tor is distri­bu­ted by in­vi­ta­tion only and is typical­ly bundled with my em­bedded CASP com­pe­tence and CPD frame­work en­gage­ments. In select cases, addi­tion­al CASPs may be in­vited where this is align­ed with on­going CPD collabo­ra­tion.



Selected sample issue for illustrative purposes only

BACK­GROUND: ESMA KNOW­LEDGE & COM­PE­TENCE GUIDE­LINES

The CASP Know­led­ge & Com­pe­tence Mo­ni­tor treats ESMA’s Guide­lines ESMA35-24871704-2922 on know­led­ge and com­pe­ten­ce, and the corres­pond­ing na­tion­al im­ple­men­ta­tions, as its re­gu­la­tory base­line. Against this base­line, the Moni­tor high­lights only those de­velop­ments that in­tro­duce ge­nuine­ly new cri­te­ria, super­visory ex­pec­ta­tions or im­ple­men­ta­tion steps that matter for CASP CPD and staff com­pe­tence frame­works.

WHAT THE CASP KNOW­LEDGE & COM­PE­TENCE MO­NI­TOR COVERS

Each issue, typically published every two weeks, scans the MiCA land­scape along a struc­tur­ed set of re­search axes and high­lights only those items that in­tro­duce ma­terial­ly new in­for­ma­tion for CASP staff com­pe­tence and CPD. Typical sec­tions in­clude:

• ESMA up­dates on MiCA know­led­ge and com­pe­tence re­quire­ments, in­clu­ding guidance, Q&As and super­vi­sory risk assess­ments that affect staff com­pe­tence ex­pec­ta­tions.
• National com­pe­tent autho­ri­ty (NCA) publi­ca­tions on CASP authori­sa­tions, CPD thres­holds, staff com­pe­tence re­gimes and super­vi­sory approach­es to train­ing and test­ing.
• Legal, aca­de­mic and practi­tion­er analy­sis that pro­vides new inter­pre­ta­tions or prac­ti­cal guidance on MiCA know­led­ge and com­pe­tence frame­works across staff and ma­na­ge­ment func­tions.
• Competence frameworks, CPD and training offerings in the market, assessed from the per­spec­tive of ESMA’s quan­ti­ta­tive and qua­li­ta­tive ex­pec­ta­tions, in­cluding role-based learning paths, initial training, annual CPD, ma­na­ge­ment CPD and super­visory evi­dence files.
• Industry news and case studies that have direct im­pli­ca­tions for CASP staff com­pe­tence, such as in­cidents illustra­ting DeFi pro­tocol risks, oracle de­pendence or mar­ket-struc­ture vul­nera­bi­li­ties.
• Focus and super­visory com­mentary on se­lected issues where a deeper analy­ti­cal inter­pre­ta­tion is useful for CASP com­pe­tence frame­works, ma­na­ge­ment over­sight or super­visory readiness.

EXAMPLE CASE STUDY: ORACLE DEPENDENCE IN PRACTICE

One recent issue of the Moni­tor analysed the so-called “Paris weather” inci­dent, where a sus­pected mani­pu­la­tion of a single tempera­ture sensor at Charles de Gaulle Air­port trig­gered un­usual­ly high pay­outs on a pre­dic­tion market. In this case, nothing in the smart contract itself was com­pro­mised; in­stead, the real-world data feed on which the con­tract relied was re­ported­ly ma­ni­pu­lated until the pre-de­fined pay­out con­di­tion was met.

From a MiCA per­spec­tive, this connects direct­ly to ESMA's know­led­ge and com­pe­tence Guide­lines, in par­ti­cu­lar Guide­line 2, Annex I, Point 3 (basic under­standing of smart con­tracts and their use cases). For CASP CPD, the case illus­trat­es why staff need a basic under­standing of oracle archi­tectures, off-chain data de­penden­cies and associat­ed attack sur­faces, and how such in­sights can be inte­grated into role-based training modules.