As stated in the Certificate Administration Guide, an institution must have at least two security officers with both online and offline capabilities. In case of changes to your security officer arrangements, SWIFT must be immediately informed. Complying with these rules is critical so that, in case of major issues, your operational business environment is not disrupted.
In our efforts to make it easy for you to follow these rules, we have made some changes to the Secure Channel and online ordering applications. The changes will help you register and manage security officers (with offline capability) easily.
To be compliant, an institution must have at least two security officers registered in Secure Channel with an active Secure Code Card. This card is used for the authentication of security requests.
SWIFT highly recommends institutions (administering BICs) to review the status of their security officers on Secure Channel on a regular basis and take the necessary actions to become compliant.
To do so, go to swift.com > Support > Secure Channel > Manage security officers. From there you can view all the security officers of your institution, their registration status as well as the status of their Secure Code Card.
If the status shows that registration is correct and card is active, then no further action is required. Otherwise, use any of the following links to help you become compliant:
| Existing features |
Changes as of 9 February
|
|
| SWIFTNet PKI Offline security requests |
New security request: Obtain SNL activation secrets for additional SWIFTNet Link orders. |
|
| Alliance functionality | No changes | |
| Secure Code Card management | New option to view the status of your Secure Code Card | |
| New features |
Description
|
|
| Register New Security Officer | Moved from online ordering | |
| De-register New Security Officer | Moved from online ordering |
|
| Distribution of SWIFTNet Link activation secrets for additional SWIFTNet Link orders | Moving from paper mail/courier process to Secure Channel | |
| Update of address details |
New feature that allows you to easily update the security officer address details
|
|
| Overview of Security Officer Profiles |
New feature that allows you to list all registered SWIFTNet security officers and view the status of their registration and Secure Code Card |
|
| Audit Report |
New feature that allows you to generate a report with all past and current SWIFTNet security officer registration activities.
History starts from 9 February. |
| Existing forms |
Changes as of 9 February
|
| Register Security Officer | |
| Register new Main SWIFTNet Security Officers |
New name: Register your initial Security Officers (online role). |
| Register new Main SWIFTNet Security Officers (Service Bureaux) | |
| Register new Additional SWIFTNet Security Officers |
New name: Register Security Officers for Secure Channel (offline role)
To be used for emergency situations (see note below) |
| Share SWIFTNet Security Officers from another institution |
New name: Administer your PKI delegation / Delegate PKI security to an administering institution (become administered)
|
| Change Security Officer | |
| Change Main SWIFTNet Security Officer Registration | Moved to Secure Channel: Register New Security Officer |
| Change Main SWIFTNet Security Officer Registration of Service Bureau |
|
| Change Shared SWIFTNet Security Officer Registration - Change from shared to own SWIFTNet Security Officer | New name: Administer your PKI delegation / Terminate delegation of PKI security (become administering) |
| Change Shared SWIFTNet Security Officer Registration - Change of Administering institution | New name: Administer your PKI delegation / Change my administering institution |
| Change Additional SWIFTNet Security Officers |
Moved to Secure Channel: Register New Security Officer |
| Terminate Security Officer | |
| Terminate Additional SWIFTNet Security Officers |
Moved to Secure Channel: De-register Security Officer
|
| Undertaking, Join SWIFT | |
| No changes to the Undertaking form. The customer either registers the two initial security officers (online + offline role), or delegates PKI security to another institution. | |
In situations where there is no security Officer with access to Secure Channel, the Register Security Officer for Secure Channel (offline role) form of online ordering can be used as solution.
On 1 February 2010, new fees have been implemented:
The usage of the Register Security Officer for Secure Channel (offline role) form will however be free of charge until 30 June. Requests will be charged at the above mentioned rates as of 1 July 2010.