UAE DU VARA published its Technology and Information Rulebook, and its schedules.
See also, UAE DU VARA issued activity-based rulebook version 2.0, #255338.
Main Points
The updated Rulebook is available in pdf format; parts are also available separately.
For Virtual Asset Service Providers (VASPs) licensed for virtual asset (VA) services.
Those VASPs must also comply with the Company Rulebook; Compliance and Risk Management Rulebook; Market Conduct Rulebook; Rulebooks for the VA activities.
Rulebook's parts are: Part I-Technology Governance, Controls and Security; Part II-Personal Data Protection; Part III-Confidential Information; Schedule 1-Guidance on Technology Governance, Risk Assessment Frameworks; and Schedule 2-Definitions.