Bratislava, november 2025 – ULC Čarnogurský Law Firm announces a significant expansion of its portfolio of services. Managing partner JUDr. Mag. Ján Čarnogurský, MBA has obtained the certification of cyber security manager issued by the Cyber Security Competence and Certification Centre, a subsidiary of the National Security Authority.
Cybersecurity at the heart of regulatory requirements
In the context of current European legislation, cybersecurity has become one of the key compliance areas for financial institutions and service providers with crypto assets. By obtaining this certification, ULC Čarnogurský can offer clients comprehensive legal and professional advice in meeting the most demanding regulatory standards.
MiCA and DORA: Why cybersecurity is essential
The Markets in Crypto Assets (MiCA) regulation requires crypto asset service providers (CASPs) to implement robust governance and cybersecurity frameworks. As of 30 December 2024, all CASPs must obtain a license from the relevant national authorities and meet strict security requirements.
The Digital Operational Resilience Regulation (DORA), which sets out a new EU framework for ICT risk management in the financial sector, operates in parallel with MiCA. DORA, which came into force on 17 January 2025, extends security requirements to all financial entities, including CASPs and asset-linked token issuers.
Comprehensive security requirements
MiCA requires CASP to implement appropriate technical and organisational security measures, including firewalls, intrusion detection systems, encryption of sensitive data and regular system updates. In addition, DORA requires entities to prepare security policies, incident detection mechanisms, ICT business continuity plans, and mandatory cybersecurity training for employees.
When do you need a cyber security manager
The services of a certified cybersecurity manager are relevant for:
MiCA licence applicants – National Competent Authorities require demonstration of robust security frameworks as a condition of CASP licence. A certified cybersecurity manager can ensure that all technical and organizational requirements are met.
Existing crypto asset service providers – Entities already operating in the market must achieve comprehensive MiCA compliance by January 2026. Recent actions by regulators indicate that applicants for CASP status should be required to undergo a cybersecurity audit by independent and qualified providers prior to authorization.
Financial institutions subject to DORA – Crypto Exchanges and Services must comply with enhanced cybersecurity requirements, including penetration testing, risk assessment, and incident reporting. The Cybersecurity Manager will ensure comprehensive ICT risk management in accordance with DORA.
Entities with NIS2 compliance requirements – For organisations that must comply with NIS2, DORA as lex specialis replaces these provisions in the financial services sector but requires equally stringent security measures.
Why ULC Čarnogurský
The combination of legal expertise in crypto assets, financial law and M&A with certified expertise in cybersecurity makes ULC Čarnogurský a unique partner for entities entering the regulated digital asset space. The firm has extensive experience in the preparation of documentation for licensing proceedings, comprehensive compliance advice and implementation of regulatory frameworks.
Our services include:
- Preparation and implementation of cybersecurity policies in accordance with MiCA and DORA
- Advising on licensing procedures for CASP
- Development of ICT risk management frameworks
- Audit of compliance with cybersecurity requirements
- Preparation of documentation for national competent authorities
- Cyber risk management training and education

