The Digital Financial Asset Law (DFAL), signed into law by Governor Newsom on October 13, 2023, creates a robust regulatory framework, including licensure and enforcement authority, for certain crypto activities. This law creates a comprehensive regulatory program for many crypto companies, requires DFPI to license and supervise many crypto asset-related companies that serve California residents, and provides important consumer protections for users. Furthermore, DFAL requires additional obligations for crypto kiosks operating in California. The DFPI is seeking experienced consultants to assist in the development of comprehensive cybersecurity and operational security review processes and procedures to assess the adequacy of digital financial asset businesses operational systems. The consultant should have expertise in digital asset cybersecurity services such as data governance and data protection and security. The consultant must have knowledge and experience developing cybersecurity risk assessments, identifying cybersecurity threats and vulnerabilities, and assessing best practices for security controls.
