Checklists
Four tools derived from the standard: the interactive SAQ-C1 self-assessment, the auditor's cryptography checklist, the ROC worksheet, and per-domain control lists for B.1–B.8. Every question comes directly from CCSA Standard v0.2 and none of them replaces the annual full audit.
Tools are the interactive layer of the standard: the self-assessment, checklists and worksheets you fill in on the site. They help you prepare for an audit, surface gaps early, and see which controls are already covered. A self-assessment is not a certification: a full audit is performed annually for all levels (Section D.4.1).
Record an assessment for each control. The SAQ does not replace the annual full audit — it is a preparation and interim self-assessment tool (for Level 1, every 6 months between audits).
The glossary, algorithm requirements, normative references, document templates and the standard PDF are read-only reference material — they are gathered in the Resources hub. Resources
Checklists
Four tools derived from the standard: the interactive SAQ-C1 self-assessment, the auditor's cryptography checklist, the ROC worksheet, and per-domain control lists for B.1–B.8. Every question comes directly from CCSA Standard v0.2 and none of them replaces the annual full audit.
The full reference question library for custodial wallets: Sections 1–11 organised by domains B.1–B.8. Interactive, with a progress bar, evidence-reference fields, and answers persisted in your browser.
Open SAQ-C1The 9 cryptography review items from Annex 2 §A2.8 that a CCSA-QSA runs against every CCM-related cryptographic operation.
Open the auditor checklistThe Report on Compliance structure: a per-requirement assessment worksheet, Defined-Approach testing procedures, and carry-over validation. Reference template from Annex 3.
Open the ROC worksheetCompact “is this control covered?” lists for each of the eight domains B.1–B.8, with Critical Requirements flagged.
Go to the domain listsPer-domain control lists B.1–B.8
One list per domain. Critical Requirements are marked with a star ★ — any “Not in Place” against them is an automatic fail at any level.
Critical
CriticalIn PlaceIn Place (Customized)Not in PlaceN/ACompensating ControlB.1B.1 — CCM inventory and classification
- B.1.1
Identification and classification of all CCM by categories A–F (a complete, living inventory).
B.1.1CCM identification and classification
- B.1.2
Cryptographic Material Environment (CME) defined, documented and segmented.
B.1.2CME boundary definition
- B.1.3
Data flows documented for each applicable CCM category.
- B.1.4
Inventory reviewed quarterly and updated on event changes within 5 business days.
B.2B.2 — Generation of CCM
- B.2.1
Entropy source qualified and verifiable (TRNG/DRBG/HSM/Secure Enclave/СКЗИ).
B.2.1Entropy sources
- B.2.2
Generation environment isolated (air-gap for the L2+ cold-storage ceremony).
- B.2.3
Key ceremony protocol documented, multi-person, with sign-off.
- B.2.4
Post-generation verification (address, signing test, MPC negative test).
B.3B.3 — Storage of CCM
- B.3.1
Storage mechanism per CCM category (HSM / MPC / Secure Enclave) matches the level.
B.3.1Storage mechanisms (HSM / MPC / Secure Enclave)
- B.3.2
Encryption at rest with AEAD; MEK stored separately from the encrypted CCM.
- B.3.3
Hot/warm/cold tiering; cold-storage share of AUM meets the level threshold.
- B.3.4
Backups geographically distributed and restoration-tested.
B.4B.4 — Usage of CCM
- B.4.1
Hardware-backed signing: the private key never leaves its trusted boundary.
B.4.1Hardware-backed signing
- B.4.2
Multi-person authorization (dual control) by transaction-value band.
- B.4.3
Signing-time 2FA; SMS, email links and push-without-challenge prohibited; DPoP for L3.
- B.4.4
PAM for privileged access and a kill-switch mechanism.
B.5B.5 — Lifecycle management
- B.5.1
Rotation cadence for all categories; triggered rotation on offboarding within SLA.
- B.5.2
Revocation with a playbook and SLA (confirmed compromise ≤15 min, suspected ≤1h).
B.5.2Revocation procedures
- B.5.3
Recovery tested; the level RTO is met.
- B.5.4
Disposal: cryptographic erasure, HSM zeroization, physical destruction for L3.
B.6B.6 — Wallet architecture
- B.6.1
Multi-sig thresholds by balance/context; for issuers, mandatory mint-key multi-sig.
- B.6.2
Watch-only monitoring on all production wallets.
- B.6.3
Architectural isolation of hot / warm / cold.
- B.6.4
Withdrawal time-locks by value band (and mint time-locks for mint keys).
- B.6.5
Destination-address whitelisting with approval and a cooling-off period.
B.7B.7 — Compromise detection and monitoring
- B.7.1
Comprehensive logging of CCM events with the required fields.
- B.7.2
Log integrity (hash-chaining / WORM) and retention by level.
- B.7.3
Watch-only reconciliation: on-chain vs signing-log discrepancy within the detection SLA.
B.7.3Watch-only monitoring and compromise detection
- B.7.4
Incident Response Playbook covers the required scenarios; annual tabletop.
B.8B.8 — Personnel and access control
- B.8.1
Background check of CCM personnel with the required elements and periodicity.
B.8.1Keyholder background checks
- B.8.2
Separation of duties (SoD) with a matrix and conflict detection.
- B.8.3
Periodic access review (quarterly for L2+).
- B.8.4
Onboarding with training and a ≥80% test; offboarding SLAs.
- B.8.5
Geographic distribution of keyholders (mandatory for L2+).
The eight Critical Requirements undergo full Defined-Approach testing regardless of baseline certifications — carry-over never applies to them.
SAQ-C1 — self-assessment
Tools are the interactive layer of the standard: the self-assessment, checklists and worksheets you fill in on the site. They help you prepare for an audit, surface gaps early, and see which controls are already covered. A self-assessment is not a certification: a full audit is performed annually for all levels (Section D.4.1).