Crypto-Asset Regulation in Argentina: A Cybersecurity Analysis of CCSS Alignment with CNV Resolution 1058/2025

Working paper (2025) · Andrés Cortés and Ana Gabriela Garis (UNSL)

Co-authored with Ana Gabriela Garis (Universidad Nacional de San Luis), who supervised my master’s thesis. The paper examines how Argentina’s crypto-asset regulation evolved and whether its most recent VASP framework — CNV Resolution 1058/2025 — aligns with the CryptoCurrency Security Standard (CCSS), the crypto-native security standard.

Abstract

Argentina’s mix of economic volatility, entrenched bi-monetarism, and distrust of the traditional financial system drove unusually high crypto-asset adoption — and unusually high user exposure. Yet regulation long remained fragmented and incomplete, with no shared doctrine across the institutions holding jurisdiction. The paper traces that regulatory history through each authority’s official communications — focusing on the recognition of legitimate use and on requirements for managing information-security risk and incidents — and then runs a correspondence analysis between CNV RG 1058/2025 and the CCSS.

What it covers

• Regulatory evolution, 2014–2025. From the UIF’s 2014 definition of virtual currencies (echoing FATF/GAFI anti-money-laundering recommendations), through a prevention-first period (2014–2022), to the more permissive, innovation-oriented framework of 2022–2025.
• Institutional map. How the BCRA, UIF, CNV, and AFIP (now ARCA) each shaped crypto regulation, and where their scopes intersect.
• RG 1058/2025 ↔ CCSS correspondence. Where Argentina’s VASP framework aligns with the crypto-security standard — and where gaps remain.

Why it matters

This is the analytical backbone behind my regulatory work — the same lens I bring to VASP compliance engagements. It pairs with the RG 1058 → ISO 27001 crosswalk: CCSS is the crypto-native standard, ISO 27001 the enterprise one.

Access

Full paper (Spanish) available on request. → andres.x.cortes@gmail.com · linkedin.com/in/andresxcortes