The Global Standard for Cryptocurrency Security
The CryptoCurrency Security Standard (CCSS) provides a framework for designing, implementing, and auditing secure cryptocurrency systems.
Community-developed, vendor-neutral, and used by organizations around the world.
Explore CCSS
Learn about the standard, security levels, and system types.
System Certification
Understand the certification process and audit requirements.
Training
Learn how to apply the CCSS through Foundations, Implementer, and Auditor training.
FAQs
Find answers to common questions about the CCSS.
Affiliates
What is the CCSS?
The CCSS is a security standard for cryptocurrency systems. It defines best practices for protecting digital assets through secure architecture, operational controls, governance, and key management.
Unlike traditional cybersecurity standards, CCSS focuses specifically on cryptocurrency security and complements broader frameworks such as ISO 27001 rather than replacing them.
Systems – not entire entities – are certified against the standard and may achieve Level 1, Level 2, or Level 3 certification.
System Types
Full System
A Full System certification evaluates the complete cryptocurrency system within the defined audit scope, including technology, processes, governance, and personnel.
Qualified Service Provider (QSP)
A Qualified Service Provider certification evaluates a service provider that delivers specific security functions to cryptocurrency systems, rather than the entire system itself.
Self-Custody System
A Self-Custody certification evaluates an environment where the owner maintains direct control of their own private keys and digital assets.
Audit Process
