IAASB Launches Interactive Technology Catalog, Adding Crypto Assets to Audit Agenda
The International Auditing and Assurance Standards Board has published a redesigned, interactive version of its Technology Catalog, and for the first time the document formally names crypto assets as an emerging topic within the IAASB's standard-setting and monitoring work. For accounting firms, audit engagement partners, and CFOs who hold or transact in digital assets, this is a signal that global audit expectations around those positions are moving from informal guidance to structured, standards-level consideration.
What the IAASB Technology Catalog Actually Is
The Technology Catalog is a living reference document that the IAASB maintains and publishes on a semi-annual basis. Its purpose is to systematically track the technologies and technology-driven developments that affect how information is produced, used, audited, and assured. It is updated twice a year, and each release is available both as a PDF edition and, now, as a fully interactive web-based format.
From PDF to interactive platform
The redesigned catalog lets stakeholders sort and filter technology topics, access dashboard-style summaries, and trace the connections between specific emerging developments and the IAASB's active projects or workstreams. That navigability matters: previously, a firm trying to understand where, say, distributed-ledger technologies sat in the IAASB's priority queue had to read through a static document to piece together the picture. The new format surfaces those relationships directly.
The interactive catalog is described as complementing a separate, formally cleared publication that the IAASB issues semi-annually. The catalog itself is a monitoring and transparency tool rather than a binding standard, but it performs an important function: it shows firms, preparers, and standard-setters which technologies are on the radar, at what stage of consideration they sit, and how the IAASB is responding. In the standard-setting lifecycle, appearing in the catalog is typically the step before a topic enters active project development.
The semi-annual rhythm and what it means for planning
Because the catalog is updated twice a year, firms can treat each release as a checkpoint. The October 2026 edition is the one that introduces the refined structure, the interactive interface, and the five new topic areas. The next update will either advance those topics toward active project status or maintain them as emerging items, giving engagement teams a predictable window to assess where standards are heading.
Five New Topics, With Crypto Assets Leading the Conversation
The October 2026 release adds five new technology and assurance topics to the catalog. The IAASB has confirmed that crypto assets is among them, alongside cybersecurity threats affecting entities and what the board describes as potential new or evolving assurance engagements. The other two new topics have not been separately enumerated in the published summary, but the structural category for each topic now shows how it connects to the IAASB's broader workstreams, making the progression from emerging issue to active standard-setting more transparent.
Why crypto assets as an audit topic is significant
Crypto assets have existed in financial statements for years, but the audit literature has lagged. Auditors have relied on a patchwork of interpretive guidance, jurisdiction-specific pronouncements, and professional judgment to handle everything from the valuation of Bitcoin holdings to the completeness assertions for wallet addresses. The IAASB formally placing crypto assets in its monitoring catalog signals that the board considers the topic sufficiently mature, and sufficiently consequential, to warrant structured tracking and eventual standards-level attention.
This matters differently depending on where a firm sits. An audit firm serving clients with material crypto asset balances needs to know whether the IAASB's future standards will require new evidence-gathering procedures, new disclosures, or revised assertions around control over private keys. A CFO preparing crypto financial statements under IFRS needs to understand whether the next round of IAASB outputs will raise the bar for what auditors can and cannot sign off on. Both audiences now have a formal channel to monitor that progression.
Cybersecurity threats and evolving assurance engagements
The inclusion of cybersecurity threats affecting entities is directly relevant to firms that custody or transact in digital assets, because the boundary between a cybersecurity event and a financial loss is thin in this asset class. A hot wallet compromise, a smart contract exploit, or a compromised private key is simultaneously an IT security incident and a potential material misstatement in the financial statements. Auditors will increasingly need to consider how cybersecurity risk feeds into their risk assessment procedures under ISA 315 and related standards.
The "potential new or evolving assurance engagements" category is the most open-ended of the three named topics, but it is arguably the most forward-looking. It covers scenarios where demand for assurance is growing in areas that existing ISAs do not fully address: proof-of-reserve reports, on-chain attestations, and sustainability-linked assurance tied to blockchain data are all plausible candidates. Firms that want to offer these services competitively will benefit from knowing the IAASB is actively considering the standards framework that would govern them.
Accounting and Reporting Context: IFRS, US GAAP, and the Standards Gap
The IAASB's move does not happen in isolation. On the accounting side, IFRS and US GAAP have both taken steps to address crypto assets in recent years, and audit standards need to keep pace with the reporting frameworks they underpin.
IFRS and the IAS 38 / IAS 2 question
Under IFRS, crypto assets are most commonly accounted for either as intangible assets under IAS 38 or, where held for sale in the ordinary course of business by a broker-trader, as inventory under IAS 2. IAS 38 allows revaluation to fair value only where an active market exists, and the definition of "active market" for a thinly traded token has always been contestable. The IASB has not yet issued a dedicated IFRS standard for crypto assets, meaning preparers and their auditors continue to apply judgement within existing frameworks. If the IAASB's Technology Catalog leads to audit guidance that tightens the evidence requirements around fair value assertions for IFRS crypto assets, firms that have relied on informal approaches will need to revisit their audit programs.
US GAAP: ASC 350-60 and the fair value model
In the US, the FASB's ASC 350-60 came into effect for fiscal years beginning after 15 December 2024, requiring entities to measure certain crypto assets at fair value with changes recognised in net income each period. For US-listed entities and their auditors, the crypto US GAAP accounting model is now settled at the recognition and measurement level, but the audit evidence requirements around fair value inputs, particularly for assets without Level 1 observable prices, remain an area of judgement. IAASB guidance in this space would be relevant even for US-headquartered firms whose parent auditors apply ISAs, as well as for non-US subsidiaries of US groups.
The standards gap the catalog is designed to close
What the Technology Catalog makes explicit is that there is a recognised gap between the pace at which digital assets are appearing on balance sheets and the pace at which audit standards have addressed them. IAASB chair Tom Seidenstein put it plainly: "Technology continues to change how information is produced, used, audited, and assured. The Technology Catalog helps us systematically monitor these developments and consider their implications for our standards and our work." The interactive format is, in part, a transparency mechanism: it lets external stakeholders see that the IAASB is watching these topics and provides a structured way to engage before standards are drafted.
Practical Implications for Accounting Firms and CFOs
Understanding that a topic is in the IAASB's Technology Catalog is useful, but the more important question is what to do with that information now, before any new ISA or ISAE is finalised.
For audit engagement teams
Firms should document the current state of their crypto asset audit procedures at the engagement level and benchmark them against the existing ISA framework. The relevant standards are ISA 500 (Audit Evidence), ISA 505 (External Confirmations), and ISA 540 (Auditing Accounting Estimates), all of which have already been applied to crypto contexts by leading firms, though not uniformly. When the IAASB publishes its next Technology Catalog update, firms should cross-reference any movements in the crypto assets topic against their existing documentation to identify where gaps may be emerging.
Firms that provide or are considering providing proof-of-reserve or other blockchain-specific assurance services should monitor the "evolving assurance engagements" topic closely. The IAASB's project pipeline will signal whether a dedicated ISAE is being contemplated. Entering that market before a standard exists carries professional risk; knowing the standard is in active development changes the calculus significantly.
For CFOs and finance teams
CFOs preparing crypto financial statements should treat the IAASB's catalog inclusion as an early indicator that their auditors' information requests around digital asset holdings are likely to become more structured over time. Firms using digital asset accounting software should verify that their systems can produce the audit trail documentation that a tightened ISA regime would require: transaction-level records, wallet address registers, fair value source data, and internal control evidence over private key management.
It is also worth reviewing engagement letters and management representation letters to ensure that the assertions being made about crypto asset completeness, existence, and valuation are supportable under current standards. If an auditor later raises concerns about those assertions in the context of new IAASB guidance, having robust contemporaneous documentation is the firm's primary defence.
For firms navigating the intersection of digital assets and broader regulatory change, the compliance picture extends well beyond audit standards. Understanding how the CLARITY Act's stall reshapes DeFi and stablecoin accounting obligations is equally relevant for any entity with exposure to decentralised protocols or stablecoin positions on the balance sheet. Similarly, firms with cross-border reporting obligations should review Thailand SEC's Bitcoin and Ether ETF rules and what they require from reporting firms as a case study in how national regulators are operationalising crypto asset oversight in ways that feed directly into audit scope discussions.
How to Engage With the IAASB Process
The IAASB's interactive format is explicitly designed to give stakeholders greater visibility and, by extension, a better platform for contributing to the standard-setting process. Firms and preparers can use the catalog to identify which of the IAASB's active projects overlap with their digital asset exposures and then participate in the relevant consultation rounds when those projects move to exposure draft stage.
Monitoring and responding to future updates
The practical workflow for a firm is straightforward: note the October 2026 baseline, check the next semi-annual release for movements in the crypto assets and cybersecurity topics, and feed any changes into the firm's methodology update cycle. If a topic moves from the "emerging" category to an active standard-setting project, that is the trigger to begin substantive methodology work rather than waiting for the final standard. Firms that engage early with IAASB consultations also have the opportunity to shape the guidance in ways that reflect practical audit realities, something that is harder to do once a standard is finalised.
Frequently Asked Questions
What is the IAASB Technology Catalog?
It is a semi-annual reference document published by the International Auditing and Assurance Standards Board that tracks emerging technologies and technology-driven developments affecting audit and assurance. The October 2026 edition introduced an interactive web-based format alongside the existing PDF version, allowing stakeholders to filter topics and trace connections to active IAASB projects.
Does listing crypto assets in the Technology Catalog mean a new ISA on digital assets is imminent?
Not immediately. Inclusion in the catalog means the IAASB is formally monitoring the topic and assessing its implications for standards, not that a new International Standard on Auditing has been initiated. The catalog is a transparency and tracking tool. A topic typically moves through several catalog cycles before the IAASB opens a formal project, and a formal project then goes through research, exposure draft, and consultation phases before a standard is finalised.
How does this affect the audit of IFRS crypto assets specifically?
Under current IFRS, crypto assets are generally accounted for as intangible assets under IAS 38 or as inventory under IAS 2, with no dedicated IFRS standard yet in place. Auditors apply existing ISAs by analogy. If the IAASB develops specific guidance, it could tighten evidence requirements around fair value assertions, completeness of wallet holdings, and controls over private keys, all of which would affect how IFRS crypto asset audits are conducted.
What should audit firms do now, before any new standard is issued?
Firms should document their current crypto asset audit procedures at the engagement level, benchmark them against ISA 500, ISA 505, and ISA 540, and review whether their evidence base is sufficient under the existing framework. They should monitor the IAASB's semi-annual catalog updates for movements in the crypto assets topic and plan to engage with any forthcoming consultation processes. Firms offering or considering blockchain-specific assurance services should track the "evolving assurance engagements" topic separately.
Is this relevant to US firms that follow PCAOB standards rather than ISAs?
Primarily, yes, for non-US entities and for US firms with international clients or subsidiaries audited under ISAs. However, IAASB developments often influence PCAOB thinking over time, and US firms with global networks typically align their methodologies across jurisdictions. Additionally, ASC 350-60 has already settled the US GAAP measurement model for crypto assets, but audit evidence standards around fair value inputs for digital assets remain an active area for all auditors regardless of the standard-setter they report to.
Source: Accounting Today