SWIFTER-MiCA CorE v1.0.0

Agentic AI: Operational (Latency 14ms)

LEI: 5493000I321B02L48B23

● S2S GATEWAY ACTIVE

2026 Annual ICT Risk Review Report

Entity: MiCAR_MINT_CORE (Paris/Berlin/Madrid)

Reporting Period: Jan 2025 - Dec 2025

Standard: DORA Art. 13.5 / CDR 2024/1774

1. Executive Summary

During the 2025 cycle, our sharding network successfully contained 4 integration anomalies. Resilience testing confirmed a 99.99% availability of critical functions during failovers.

2. ICT Risk Profile Evolution

Threat Level: Increased for "Quantum-Harvest" attacks.
Control Response: Full migration to ML-DSA-87 signatures across all offices.
Risk Tolerance: Currently within the board-approved 10% threshold for non-critical latency.

3. Resilience Testing Findings

Total Tests: 12 Monthly Drills + 1 Regional Failover Simulation.
Key Finding: Madrid node latency increased by 15% under peak load.
Recommendation: Vertical scaling of Madrid Shard-Storage by Q2 2026.

Test Scenario	Result	Evidence Log
BFT 2-of-3 Consensus	PASSED	Node node-berlin killed; system maintained finality via node-paris & node-madrid.
PQC Handshake Integrity	PASSED	1,000 requests signed with ML-DSA-87; 0.0% failure rate.
Geo-Latency Stress	PASSED	System handled simulated 50ms inter-node delay with < 1s settlement.
SBLC Draw-Down API	PASSED	Successful pacs.009 trigger and shard-lock release.

4. Automated Board Escalation Thresholds

Metric	"Red-Flag" Threshold	Board Escalation Logic
Consensus Lag	> 5 Seconds per Shard	High Risk: Potential "Fork" in the regional offices.
PQC Handshake Failure	> 1% of Requests	Critical: Possible "Quantum-Grip" or HSM desync.
Lien-Lock Leak	Any unauthorized move	Catastrophic: MiCA Art. 70 Breach. Immediate Shutdown.
NCA Gateway Error	3 consecutive failures	Compliance Risk: DORA Art. 17 Notification failure.

5. Proposed Framework Adjustments

Adopt the 'Continuous Learning' module as the primary feedback loop for incident RCA.
Formally integrate the TFR 'Email Fallback' as the standard manual procedure.