[JCBA Releases Draft of Security Practices for Crypto Asset Trustees, Comprising 347 Items and Separating Key Management into Its Own Domain] Deep Tide TechFlow reports that on October 20, according to CoinPost, the Japan Crypto Asset Business Association (JCBA) Security and System Committee announced the establishment of a Crypto Asset Trustee Management Working Group (WG) on October 20 and released a draft of security measures titled 'Practice Collection' aimed at trustees. The draft includes a total of 347 items, covering 10 major domains such as governance, personnel and physical security, BCP (Business Continuity Planning), and sub-delegation management. It also designates 'Key Management and Signature Operations' as a standalone domain. Trustee service models are categorized into five types: 'Custodial,' 'Intermediary,' 'Provider,' 'Reference,' and 'Other.' Additionally, an Excel-based self-assessment form and a confirmation document management ledger are provided. JCBA noted that general third-party assurance reports like SOC2 are insufficient for adequately assessing risks unique to crypto assets, such as private key lifecycle management.