Fidelio Tata, PhD⎢CASP MONITOR

CASP Know­ledge & Com­pe­tence Mo­ni­tor:
MiCA super­visory in­telli­gence for CASP com­pe­tence frame­works

This Moni­tor identi­fies ge­nuine­ly new re­gu­la­tory, su­per­vi­sory and mar­ket de­velop­ments relevant to know­led­ge and com­pe­tence frameworks for Cryp­to-Asset Ser­vice Pro­viders (CASPs) under MiCA. It covers ESMA and NCA publi­ca­tions, super­vi­sory practice, regulatory and aca­de­mic ana­lysis, competence and CPD offerings, and selected industry commentary where they go beyond the base­line estab­lished by ESMA’s Guide­lines ESMA35-24871704-2922 on know­led­ge and com­pe­ten­ce.

The Moni­tor focuses on de­velop­ments that affect how CASPs de­sign, evi­dence, main­tain and de­fend com­pe­tence frame­works across staff and ma­na­ge­ment func­tions in the con­text of authori­sa­tion and on­going super­vi­sion. It is de­sign­ed to support CASPs in alig­ning their com­pe­tence frame­works with emerg­ing super­vi­sory ex­pec­ta­tions, national im­ple­men­ta­tion prac­tices and evolving autho­ri­sa­tion and super­visory expectations across EU juris­dic­tions.

Related Insight: My Frankfurt School Insights article “Nach der Zulassung ist vor der Aufsicht: Warum Managementkompetenz unter MiCAR in den Fokus rückt” examines why MiCAR knowledge and competence requirements increasingly raise questions of management responsibility, effective oversight and internal competence within CASPs. Link.

The CASP Know­led­ge & Com­pe­tence Moni­tor is distri­bu­ted by in­vi­ta­tion only and is typical­ly bundled with my em­bedded CASP com­pe­tence and CPD frame­work en­gage­ments. In select cases, addi­tion­al CASPs may be in­vited where this is align­ed with on­going CPD collabo­ra­tion.

Selected sample issue for illustrative purposes only

BACK­GROUND: ESMA KNOW­LEDGE & COM­PE­TENCE GUIDE­LINES

The CASP Know­led­ge & Com­pe­tence Mo­ni­tor treats ESMA’s Guide­lines ESMA35-24871704-2922 on know­led­ge and com­pe­ten­ce, and the corres­pond­ing na­tion­al im­ple­men­ta­tions, as its re­gu­la­tory base­line. Against this base­line, the Moni­tor high­lights only those de­velop­ments that in­tro­duce ge­nuine­ly new cri­te­ria, super­visory ex­pec­ta­tions or im­ple­men­ta­tion steps that matter for CASP CPD and staff com­pe­tence frame­works.

WHAT THE CASP KNOW­LEDGE & COM­PE­TENCE MO­NI­TOR COVERS

Each issue, typically published every two weeks, scans the MiCA land­scape along a struc­tur­ed set of re­search axes and high­lights only those items that in­tro­duce ma­terial­ly new in­for­ma­tion for CASP staff com­pe­tence and CPD. Typical sec­tions in­clude:

• ESMA up­dates on MiCA know­led­ge and com­pe­tence re­quire­ments, in­clu­ding guidance, Q&As and super­vi­sory risk assess­ments that affect staff com­pe­tence ex­pec­ta­tions.
• National com­pe­tent autho­ri­ty (NCA) publi­ca­tions on CASP authori­sa­tions, CPD thres­holds, staff com­pe­tence re­gimes and super­vi­sory approach­es to train­ing and test­ing.
• Legal, aca­de­mic and practi­tion­er analy­sis that pro­vides new inter­pre­ta­tions or prac­ti­cal guidance on MiCA know­led­ge and com­pe­tence frame­works across staff and ma­na­ge­ment func­tions.
• Competence frameworks, CPD and training offerings in the market, assessed from the per­spec­tive of ESMA’s quan­ti­ta­tive and qua­li­ta­tive ex­pec­ta­tions, in­cluding role-based learning paths, initial training, annual CPD, ma­na­ge­ment CPD and super­visory evi­dence files.
• Industry news and case studies that have direct im­pli­ca­tions for CASP staff com­pe­tence, such as in­cidents illustra­ting DeFi pro­tocol risks, oracle de­pendence or mar­ket-struc­ture vul­nera­bi­li­ties.
• Focus and super­visory com­mentary on se­lected issues where a deeper analy­ti­cal inter­pre­ta­tion is useful for CASP com­pe­tence frame­works, ma­na­ge­ment over­sight or super­visory readiness.

EXAMPLE CASE STUDY: ORACLE DEPENDENCE IN PRACTICE

One recent issue of the Moni­tor analysed the so-called “Paris weather” inci­dent, where a sus­pected mani­pu­la­tion of a single tempera­ture sensor at Charles de Gaulle Air­port trig­gered un­usual­ly high pay­outs on a pre­dic­tion market. In this case, nothing in the smart contract itself was com­pro­mised; in­stead, the real-world data feed on which the con­tract relied was re­ported­ly ma­ni­pu­lated until the pre-de­fined pay­out con­di­tion was met.

From a MiCA per­spec­tive, this connects direct­ly to ESMA's know­led­ge and com­pe­tence Guide­lines, in par­ti­cu­lar Guide­line 2, Annex I, Point 3 (basic under­standing of smart con­tracts and their use cases). For CASP CPD, the case illus­trat­es why staff need a basic under­standing of oracle archi­tectures, off-chain data de­penden­cies and associat­ed attack sur­faces, and how such in­sights can be inte­grated into role-based training modules.