Photo: John Phillips
INSTITUTIONAL ADOPTION / ADOPTION GUIDE
A practical path to institutional blockchain adoption.
Who has to sign, what evidence each signature needs, and which unresolved question should stop a program before it reaches production.
Part of Institutional Adoption.
- Accountable business owner
- Risk & compliance
- Information security
- Legal & regulatory
- Procurement
- Operations & production support
The review is the decision.
The program page describes what Panasia produces. This piece describes what the institution has to be able to answer in its own review, after the vendor has left the room — because that review, not the pilot, is where adoption is decided.
FOUR THINGS THE INSTITUTION OWNS
04 / 09Four things you own.
A blockchain program is easier to evaluate when it is framed as an operating decision with an accountable owner rather than a technology announcement.
Name the accountable owner first
A program without a single accountable business owner produces a demo. The owner is the person who can stop it, not the person who sponsored it.
Evidence per reviewer, not per phase
Risk, security, legal, procurement, and operations each need a different artefact. Producing one deck for five reviewers is the most common reason a pilot stalls at month five.
Controls are the deliverable
MAS Notice PSN05 is the kind of standard a reviewer actually applies. Designing to a published control standard from the start is cheaper than retrofitting one after the pilot.
Production means recoverable
Adoption is provable when someone can operate, approve, stop, and recover the system — and has already done so in a test.
Owner, reviewers, recovery, transfer.
Each step produces an artefact a reviewer signs, which is what turns a pilot into an adoption record.
-
01
Owner
Name the accountable business owner and the stop authority in writing.
-
02
Reviewer map
List every internal reviewer, the artefact each requires, and the date each is engaged.
-
03
Recoverability test
Demonstrate operate, approve, stop, and recover before the pilot is called a success.
-
04
Obligation transfer
Move monitoring, reporting, and incident duties to a named operating team with a scheduled review.
The standards these reviewers reach for.
06 / 09date of the MAS technology-risk notice applied to DPT licensees
2024-02-06
MAS Notice PSN05 — Technology Risk Management for payment service providers
roles to separate in a Hong Kong distribution chain
4
Panasia Research — Hong Kong stablecoin distribution, issuer to client
MAS-licensed DPT institutions observed in the directory
38
Panasia Research — Singapore DPT counterparties, licence is the first check
MAS — participants in the Project Guardian industry group
MAS publishes the institutions in the Project Guardian industry group, which is what a verifiable adoption claim looks like: a named institution and a named use case, not a named technology.
Evidence as of
Photo: Prime Minister's Office
RESOURCES
08 / 09Continue into the program, or the markets where the controls are already published.
SCOPE THE ADOPTION CASE
09 / 09