What is SWIFT CSP ?
The SWIFT Customer Security Programme (CSP) is a mandatory security program for all SWIFT network users. It defines a set of security controls that each financial institution must implement to protect its local SWIFT infrastructure. The CSCF (Customer Security Controls Framework) includes mandatory and advisory controls, covering Internet access restriction, network segmentation, attack surface reduction, compromise prevention, anomaly detection, and incident response. Each user must submit an annual compliance attestation.
Key Points
- Mandatory controls covering SWIFT local environment security (secure zone, segmentation)
- Internet access restriction and critical operator system protection
- Transaction anomaly detection and database integrity monitoring
- Identity and access privilege management with strong authentication
- Mandatory annual attestation submitted via the KYC-SA portal (Know Your Customer - Security Attestation)
Why Zaxyr
Zaxyr automates the preparation of your SWIFT CSP attestation. The platform collects compliance evidence from your SWIFT infrastructure, tracks mandatory and advisory CSCF controls, and generates the documentation needed for KYC-SA attestation. Mapping to ISO 27001 and PCI DSS allows reuse of existing evidence.