Topic starter
23/10/2026 12:45 am
TL;DR: The National Bank of the Kyrgyz Republic has signed an MoU with CertiK to support Digital Som security and digital asset oversight, covering blockchain security, formal verification, operational resilience, AML/CFT, custody, supervision, and training. The partnership reflects a wider shift: CBDC and digital asset programmes now need governance and monitoring built in from the start, not added after launch.
Editorial analysis by NHI Mgmt Group, based on content published by CertiK: “CertiK and the National Bank of the Kyrgyz Republic Partner on Digital Som Security”.
Key questions
Q: How should central banks govern digital currency security before launch?
A: Treat digital currency security as an operating model issue, not a technical add-on.
Q: Why do CBDC programmes need both technical assurance and operational resilience?
A: Because a system can be correct in design and still fail in operation.
Q: What breaks when supervisory access is not tightly controlled?
A: Oversight becomes difficult to trust if staff can view, approve, and intervene without clear role boundaries or audit trails.
Practitioner guidance
- Define supervisory privilege boundaries Map every role that can view, approve, pause, or override digital asset operations, then restrict those rights to the smallest practical scope.
- Separate custody from oversight Keep custody controls, supervisory review, and policy enforcement on distinct approval paths so no single role can both operate and self-authorise.
- Build resilience into the operating model Test failure recovery, monitoring escalation, and manual intervention paths before production use, especially where currency availability is a public trust issue.
Bottom line: Digital Som security is being treated as a governance and resilience problem, not simply a blockchain design issue.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →