Audit engagement
Key Management Review
Assessment of cryptographic key lifecycle controls—generation, storage, rotation, dual control, and emergency recovery—for fintech digital asset programmes.
What we deliver
Auditors walk HSM and multi-party computation setups with your security owners, sample key ceremonies and access logs, and document residual risk where single points of failure or undocumented recovery paths remain. Suited to licensed platforms preparing for technology examinations in Hong Kong.
Who this fits
Compliance, risk, security, and operations leads at Hong Kong fintech firms that custody, broker, or settle digital assets and need independent control assurance before supervisory, bank, or investor reviews.
How we work
Remote and on-site sessions from Valley Centre, Wan Chai. Read-only access and sampling periods are agreed in writing before fieldwork. See the custody control map for the domains we typically cover.