Exchanges and custodians
Continuous monitoring of deposit, withdrawal and treasury flows, with escalation paths agreed in advance.
Banking and financial services
Banks and financial services firms adopting on-chain settlement need the same controls they already operate under. Client Focus builds the integration between core banking, card and payment rails and on-chain settlement, then runs it inside an ITIL-based operating model with named service owners.
Operational concerns
What clients ask the firm to address
- Control frameworks including PCI DSS, SOC 2, FFIEC and GDPR applied to chain systems.
- Change management and release governance for production payment paths.
- Reconciliation and exception handling across banking and on-chain records.
Services applied
How Client Focus responds
- Production blockchain networks built to the control expectations of banking supervisors, including FFIEC guidance and the OCC third-party risk management framework, with logging and reconciliation.
- Technology risk controls covering encryption, access management and fraud detection.
- Managed operations with a named owner for every service.
Regulatory context
Supervisory expectations in the United States
Engagements are configured to the supervisory expectations that apply to United States banks and their service providers.
- OCC Interpretive Letter 1183 and related guidance on bank participation in distributed ledger networks.
- The 2023 Interagency Guidance on Third-Party Relationships.
- FFIEC IT Examination Handbook booklets on Outsourcing Technology Services and Business Continuity Management.
- NYDFS 23 NYCRR Part 500 for New York licensed entities.
- BSA/AML and OFAC screening obligations at the boundary between fiat and on-chain settlement.
Named use cases include tokenized deposits, tokenized funds and on-chain settlement of card, ACH and real-time payment flows.
- security and network operations
- named escalation with individual accountability
- notification target after validation
- certified information security management system
Continuous on-chain security operations for a Tier-1 global bank
Client Focus operates the public blockchain security operations function for a Tier-1 global bank, covering Layer 1 and Layer 2 networks including Ethereum and Base, transaction monitoring, smart contract runtime security, custody and treasury wallet surveillance, sanctions screening and Travel Rule integration, bridge monitoring, and regulatory reporting feeds with forensic case support. Alerts are delivered into the bank's existing security stack under banking service levels, 24/7/365.
The engagement is run from the C'ROC, the 24/7 blockchain security operations center of Client Focus.
Related
Continue reading
Stablecoin issuers and payments
Issuance, redemption and settlement flows watched against policy, with regulatory reporting in mind.
Protocols and foundations
Validator and node operations, upgrade planning and security monitoring for live networks.
Discuss banking and financial services operations with Client Focus.
Whether you are designing a new system, running one in production, or defending one, Client Focus brings engineering, network operations and security operations under one accountable model. Every request is reviewed by a principal of the firm.