SIO-9.1.1
Stablecoin issuers must have in place clear and comprehensive policies and procedures, from a technology perspective, for the following key areas:
(a) Maintenance and development of systems and architecture (e.g., code version control, implementation of updates, issue resolution, regular internal and third-party testing);
(b) Security measures and procedures for the safe storage and transmission of data;
(c) Business continuity and client engagement planning in the event of both planned and unplanned system outages;
(d) Processes and procedures specifying management of personnel and decision-making by qualified staff; and
(e) Procedures for the creation and management of services, interfaces and channels provided by or to third parties (as recipients and providers of data or services).
Added: July 2025