# kaal:claim:3936876-030

**Claim.** Every risk in a digital custody operation should carry both a preventative and a detective control, layered so that if some controls fail others remain to reduce the risk.

**Type.** design  **Support.** argued

**Holds when.**

- digital asset custody risk management programs

**Source quote.**

> Every risk should have a preventative and detective control and there should be appropriate layers of controls so that if some fail, others will still be there to reduce the risk.

**From.** Wulf A. Kaal, Hayley Howe, *Custody of Digital Assets* (2021), III.2 OCC Requirements, page 25

**Cite as.** Wulf A. Kaal, Hayley Howe, Custody of Digital Assets (2021). SSRN: https://ssrn.com/abstract=3936876

**Verify.** sha256 of source PDF `9bc0903d01910460298e754c451f027df4324367359800a98ee8e638d94aff55` at https://raw.githubusercontent.com/wulfkaal/Academic-Papers/main/papers/pdf/Kaal%20and%20Howe%20-%202021%20-%20Custody%20of%20Digital%20Assets.pdf

**Topics.** risk-and-incentives, defi, consensus-and-security

**Keywords.** risk-controls, defense-in-depth, custody-design, cybersecurity

**Canonical form.** This markdown file is the canonical hashed representation of the claim. Its sha256 is the content hash used for attestation.