MiCA Compliance Services

Q: How long does MiCA ICT compliance preparation take?

The timeline typically ranges from a few weeks to six months, depending on the maturity of your existing ICT documentation and security controls.

Q: How do MiCA and DORA overlap?

MiCA sets the licensing and conduct requirements, while DORA focuses specifically on ICT risk and operational resilience. Many ICT controls support both regulations simultaneously.

MiCA compliance services supporting crypto-asset companies with MiCA regulation ICT compliance, and preparation for the MiCA licensing process in the EU.

Contact sales Learn more

Gabrielius Vinciūnas

Head of Information Security

[email protected]

Paulius Užkurėlis

Business Development Manager

[email protected]

MiCA Compliance Offers

MiCA ICT compliance assessment

Independent assessment for organisations with existing ICT security measures that need to confirm whether they meet MiCA ICT requirements.

Review of ICT-related policies, processes, and documentation.

Evaluation of ICT systems and operational procedures.

Gap analysis against MiCA ICT requirements.

Clear, prioritised remediation steps to address identified gaps.

Deliverables:

A clear, actionable report outlining ICT compliance gaps and practical steps to close them.

Request this service

MiCA ICT documentation package

Practical support for organisations applying for a MiCA licence that need compliant ICT documentation in place.

Documentation of ICT systems, controls, and processes.

Information security policy aligned with MiCA expectations.

Business continuity and resilience policy.

ICT risk management procedures ready for submission.

Deliverables:

A ready-to-submit ICT documentation package for the MiCA license.

Request this service

CISO for MiCA

Flexible access to senior security leadership for organisations starting from scratch or needing hands-on guidance without a full-time hire.

Strategic planning for MiCA and related regulatory ICT requirements.

On-demand security leadership and decision support.

Guidance on ICT risk management and compliance roadmap.

Flexible expert hours aligned with your maturity, goals, and budget.

Deliverables:

Expert support tailored to your company’s maturity, compliance goals, and budget.

Request this service

Industries We Support

Crypto-asset service providers (CASPs)

Crypto exchanges

Trading platforms

Custodial wallet providers

Crypto brokerage services

Crypto-asset issuers

Token issuers

Issuers of Asset-Referenced Tokens (ARTs)

Issuers of E-Money Tokens (EMTs)

Fintechs

EU market entry

MiCA licence preparation

MiCA documentation for FinTech's

Startups building blockchain-based products

Blockchain platforms

DeFi infrastructure providers

Web3 applications

Our MiCA Compliance Process

Technical & ICT readiness review

We review your ICT systems, controls, and security practices against MiCA requirements. This includes infrastructure security, logging and monitoring, secure configuration standards, and reporting readiness. The assessment highlights gaps, risks, and areas that need improvement for CASPs and crypto-related activities.

Alignment with EU ICT risk management standards

We align ICT risk management practices with relevant EU standards, focusing on third-party ICT risk and operational resilience. This step ensures risks are identified, assessed, and managed in a consistent and regulator-ready way.

ICT documentation for MiCA licence

We prepare clear, regulator-ready ICT documentation to support the MiCA licence application. This includes structured evidence, procedures, and templates that demonstrate compliance and can be submitted directly to supervisory authorities.

04

Ongoing MiCA compliance

Through ongoing CISO support, we help organisations maintain MiCA compliance as risks, systems, and regulatory expectations evolve. This includes continuous risk monitoring, control effectiveness reviews, and support with regulatory reporting when required.

Why Baltic Amadeus

Compliance-first approach.

Certified experts.

Financial sector experience.

Certifications

CISA

Certification mark for TÜV Thüringen with a red checkmark and a red mask symbol.

ISO 27001

CISSP

CISM

View all certificates

FAQ

What are the key MiCA compliance requirements for crypto companies?

MiCA requires crypto companies to have clear ICT governance, risk management processes, security controls, incident-handling procedures, and business continuity arrangements. Organisations must also be able to demonstrate these measures through clear, regulator-ready documentation as part of the licensing process.

How long does MiCA ICT compliance preparation take?

The timeline depends on your starting point. Organisations with existing ICT security and documentation may only need a focused review and updates, while others need to build policies, controls, and evidence from scratch. Preparation typically takes from a few weeks to five-six months.

How do MiCA and DORA overlap?

MiCA focuses on licensing and conduct requirements for crypto-asset activities, while DORA focuses on ICT risk and operational resilience. For crypto companies, MiCA sets what needs to be in place, and DORA strengthens how ICT risks are managed over time. In practice, many ICT controls, risk management processes, and incident handling measures support both regulations.