Millions of transactions are processed through SWIFT daily, making it an attractive target for cybercriminals. SWIFT responded by developing a Customer Security Programme (CSP) and Customer Security Controls Framework (CSCF) to ensure network security and transparency.
Since July 2021, SWIFT’s Customer Security Control Framework (CSCF) has required users to independently assess compliance with their standards. It can be conducted either externally by an individual who has relevant security industry certifications or internally by members of your organization.
As a SWIFT CSP Assessment provider, Online can help SWIFT users assess and verify CSCF compliance. By working with us, you can streamline the compliance process and relieve internal pressure.
SWIFT users gain verified assurance of their compliance with the CSCF controls by having a CSP Assessment performed by a qualified external provider, such as Online Business Systems, in accordance with recent requirements for independent assessments.
Online’s seasoned SWIFT CSP assessors have completed the most recent SWIFT CSP training course and also are PCI DSS QSAs in good standing. Our consults have a minimum of 10 years of cybersecurity experience.
SWIFT CSP requires that each assessor possess one auditing certification (CISA, ISO 27001 LA, etc.) and one security certification (CISM, CISSP, etc.) which enables an in-depth review of your environment across multiple disciplines.
By clicking the link below, you will be able to find us in the official SWIFT Assessment provider directory.
We use a 9-step methodology for our assessment that is aligned with SWIFT and PCI DSS requirements.
Each assessment has a named Lead Assessor who organizes an assessment team. The Lead Assessor will work with you to deliver the relevant attestation documentation for your annual submission. In addition, our independent Quality Assurance function reviews our deliverables for completeness and accuracy and provides oversight so you can be confident that they are produced in an ethical and unbiased manner.
STEVE LEVINSON
Vice President,
Risk, Security & Privacy
JAMES DEVOY
Managing Director,
EMEA
