SWIFT CSCF Annual Assessment

Meet SWIFT attestation deadlines year after year

SWIFT’s CSCF (Customer Security Control Framework) describes mandatory and advisory security controls for any organization that uses SWIFT services. These controls are updated annually to account for current threat scenarios.

Our annual assessment provides all the support and guidance from cybersecurity experts you need to keep your organization aligned to the latest version of the CSCF. Our assessor will:

• Agree an independent assessment schedule, scope of work, and user resources for interviews
• Review CSP (Customer Security Program) documentation, SWIFT footprint documentation, assessment of local and remote footprints, and responsibilities
• Interview SWIFT business users and technical administrators to understand processes, flows, and controls in place
• Establish a test plan and use a risk-based approach to assess your compliance with CSP control definitions
• Determine the applicability of the optional/advisory controls

  Download the full service description

How do we work?

We will work with you – either remotely or on-site – on a yearly basis to complete an independent assessment of the controls to verify your operational effectiveness to meet the necessary requirements. This may include:

• Business process documents
• Architecture diagrams
• Configuration files
• Incident response plans
• Other evidence of controls implementation

  Download the full service description

Conditions

This service applies to organizations of any size within the banking/financial services sector.