Swift’s Customer Security Programme (CSP) helps financial institutions to ensure their defences against cyberattacks are up to date and effective; and to protect the integrity of the wider financial network. SWIFT users evaluate the security measures they have implemented with those detailed in the Customer Security Controls Framework (CSCF), before attesting their compliance level annually.

With solid attestation and compliance rates, the CSP reflects a community of highly engaged SWIFT users committed to stopping cyberattacks in their tracks. And, the CSP keeps updated to cope with the ever-evolving cyber threat landscape.

Effective each year as from July, Swift releases an updated version of the CSCF and you need to support your attestation with an independent assessment.

The CSCF security controls are based on three overarching framework objectives, supported by seven security principles. The objectives are the highest level structure for security within the user's environment, whilst the associated principles elaborate on the highest priority focus areas within each objective. The objectives and corresponding principles include the following: