A system comprising: a communications interface configured to receive an escrow instruction from a first entity (102; 202; 302; 402; 504; 604; 704), the escrow instruction identifying an escrow entity (104; 204; 304; 404; 508; 608; 708) and a second entity (106; 206; 306; 406; 506; 606; 706); and an access configuration controller (112; 212; 312; 412; 502; 602; 702) controlling access to at least one asset (110; 210; 310; 410), coupled to the communication interface, and including a secure platform device, the secure platform device configured to generate a transfer cryptographic key responsive to receipt of the escrow instruction, the transfer cryptographic key controlled by a policy (118; 218; 318; 418) encoding an escrow period, the secure platform device further configured to decompose the transfer cryptographic key into at least a first cryptographic key component (128a; 222a; 322a; 422a) and a second cryptographic key component (128b; 222b; 322b; 422b), the communications interface being further configured to distribute the first cryptographic key component to the escrow entity and the second cryptographic key component to the second entity and to receive an ownership instruction, the secure platform device being further configured to verify whether the ownership instruction received during the escrow period is validly signed, the received ownership instruction being validly signed when the ownership instruction is signed by a copy of the transfer cryptographic key recomposed using the first cryptographic key component and the second cryptographic key component, the ownership instruction being invalidly signed when not signed by the copy of the transfer cryptographic key. a communications interface configured to receive an escrow instruction from a first entity (102; 202; 302; 402; 504; 604; 704), the escrow instruction identifying an escrow entity (104; 204; 304; 404; 508; 608; 708) and a second entity (106; 206; 306; 406; 506; 606; 706); and an access configuration controller (112; 212; 312; 412; 502; 602; 702) controlling access to at least one asset (110; 210; 310; 410), coupled to the communication interface, and including a secure platform device, the secure platform device configured to generate a transfer cryptographic key responsive to receipt of the escrow instruction, the transfer cryptographic key controlled by a policy (118; 218; 318; 418) encoding an escrow period, the secure platform device further configured to decompose the transfer cryptographic key into at least a first cryptographic key component (128a; 222a; 322a; 422a) and a second cryptographic key component (128b; 222b; 322b; 422b), the communications interface being further configured to distribute the first cryptographic key component to the escrow entity and the second cryptographic key component to the second entity and to receive an ownership instruction, the secure platform device being further configured to verify whether the ownership instruction received during the escrow period is validly signed, the received ownership instruction being validly signed when the ownership instruction is signed by a copy of the transfer cryptographic key recomposed using the first cryptographic key component and the second cryptographic key component, the ownership instruction being invalidly signed when not signed by the copy of the transfer cryptographic key. the communications interface being further configured to distribute the first cryptographic key component to the escrow entity and the second cryptographic key component to the second entity and to receive an ownership instruction, the secure platform device being further configured to verify whether the ownership instruction received during the escrow period is validly signed, the received ownership instruction being validly signed when the ownership instruction is signed by a copy of the transfer cryptographic key recomposed using the first cryptographic key component and the second cryptographic key component, the ownership instruction being invalidly signed when not signed by the copy of the transfer cryptographic key.