Gemini Completes Second Level of Cybersecurity Compliance Exam

The Gemini crypto exchange has completed a new examination to ensure its security system controls operate effectively. 

Gemini announced Thursday that it had completed an independent SOC 2 Type 2 examination conducted by consulting firm Deloitte, a year after it completed an SOC 2 Type 1 examination. Where the previous examination evaluated Gemini’s design and system control implementation, the Type 2 exam looks at operations across a period of time.

“We believe this kind of assurance, in addition to other safeguards we have implemented, such as digital asset insurance, helps protect our customers data and cryptocurrency,” said Yusuf Husain, head of risk at Gemini, in a statement. 

The firm will be completing a SOC 2 Type 2 on an annual basis, Husain said.

The American Institute of Certified Public Accountants (AICPA) introduced the cybersecurity risk management examinations, named SOC for Cybersecurity, in April 2017. 

The examinations are designed to help organizations meet the growing challenge of communicating the design and effectiveness of cybersecurity risk management programs to interested parties, according to a white paper from the AICPA. 

“Simply saying you are secure is not the same as demonstrating you are secure to an independent third party,” Husain said. “We feel that everyone should require these standards for any cryptocurrency exchange and custodian they use.”