SWIFT CSCF Annual Assessment

Meet SWIFT attestation deadlines year on year

SWIFT’s Customer Security Control Framework (CSCF) includes both mandatory and advisory security controls for any financial organisation that uses SWIFT services. These controls are updated annually to reflect current threats scenarios.

Our annual assessment provides all the support and guidance from cyber security experts you need to confirm your organisation is aligned to the latest version of the CSCF. Our assessors will:

• Agree an independent assessment schedule, scope of work and user resources for interviews;
• Review Customer Security Programme (CSP) documentation, SWIFT footprint documentation, assessment of local and remote footprints, and responsibilities;
• Interview SWIFT business users and technical administrators to understand processes, flows and controls in place;
• Establish a test plan and use a risk-based approach to assess the user’s compliance with CSP control definitions; and
• Determine the applicability of the optional/advisory controls.

  Download the full service description

How do we work?

We’ll work with you on a yearly basis either remotely or on-site to complete an independent assessment of the your controls to verify your operational effectiveness to meet the necessarythat they meet SWIFT’s requirements. To achieve this, the assessor will examine a range of information, whichhis may include:  

• Business process documents;
• Architecture diagrams;
• Configuration files;
• Incident response plans; and/or
• Other evidence of control implementation.

  Download the full service description

Conditions

This service applies to organisations of any size within the banking/financial sector.