SWIFT CSCF Annual Assessment

Meet SWIFT attestation deadlines year on year

SWIFT’s Customer Security Control Framework (CSCF) includes both mandatory and advisory security controls for any financial organisation that uses SWIFT services. These controls are updated annually to reflect current threat scenarios.

Our annual assessment provides all the support and guidance from cyber security experts you need to confirm that your organisation is aligned to the latest version of the CSCF. Our assessors will:

• Agree an independent assessment schedule, scope of work and user resources for interviews;
• Review Customer Security Programme (CSP) documentation, SWIFT footprint documentation, assessment of local and remote footprints, and responsibilities;
• Interview SWIFT business users and technical administrators to understand processes, flows and controls in place;
• Establish a test plan and use a risk-based approach to assess the user’s compliance with CSP control definitions; and
• Determine the applicability of the optional/advisory controls.

  Download the full service description

How do we work?

We’ll work with you either remotely or on-site to complete an independent assessment of your controls to verify that they meet SWIFT’s requirements. To achieve this, the assessor will examine a range of information, which may include:

• Business process documents;
• Architecture diagrams;
• Configuration files;
• Incident response plans; and/or
• Other evidence of control implementation.

  Download the full service description

Conditions

This service applies to organisations of any size within the banking/financial sector.