Customer Security Programme MySwift

Customer Security Programme

Swift’s Customer Security Programme (CSP) is a mandatory initiative that helps financial institutions protect their Swift footprint against cyber threats. By implementing security controls and attesting level of compliance against the Customer Security Controls Framework (CSCF), institutions demonstrate their commitment to security and contribute to the resilience and trust of the global financial ecosystem.

Customer Security Programme

Benefits

Stronger cybersecurity posture
Stronger cybersecurity posture

Swift users implement mandatory controls from the CSCF and validate them through independent assessments—raising the bar for cyber hygiene and reducing the risk of fraud

Trust through transparency
Trust through transparency

Attestation results are visible to counterparties (when access granted) and supervisors via KYC Security Attestation (KYC-SA) and KYS, helping build trust and streamline third-party risk management

Operational efficiency
Operational efficiency

Standardised assessments and reporting templates reduce complexity, save time, and support consistent compliance across institutions

Expert guidance and support
Expert guidance and support

If selected, Swift certified assessors benefit from Swift training, documentation, and direct access to CSP experts—ensuring assessments are accurate and aligned with best practices

Community-driven resilience
Community-driven resilience

CSP fosters collaboration through working groups and intelligence sharing via the ISAC portal, helping users stay ahead of evolving threats

CSP compliance journey

  • 1. Understand Controls

    Start by reviewing the latest Customer Security Controls Framework (CSCF). Identify which mandatory and advisory controls apply to your Swift infrastructure, and familiarise yourself with the objectives, scope, and risk drivers defined in the documentation.

    Read more

  • 2. Implement Controls

    Once you’ve identified the applicable CSCF controls, the next step is to put them into practice. This may involve, as examples, updating your Swift environments, enhancing access management, and strengthening your technical infrastructure and incident response capabilities. You can do this internally with your IT, risk, or compliance teams, or partner with a cybersecurity service provider to ensure robust implementation and alignment with industry best practices.

    Read more

  • 3. Perform Independent Assessment

    Validate the effectiveness of the design and an implementation of your controls through an independent assessment. This can be performed internally by a second or third line of defence (e.g. risk, compliance, internal audit) or externally by an independent assessor.

    Read more

  • 4. Submit Attestation

    Complete your attestation in the KYC-SA application, indicating your level of compliance compliance for each applicable control. If any control is not yet met, provide a remediation date and update your attestation once compliant.

    Read more

  • 5. Leverage & Share CSP Data

    Once your attestation is published in KYC-SA, it becomes visible to counterparties—supporting transparency, trust, and streamlined third-party risk management. You can also use the ISAC portal to share threat intelligence and stay informed about emerging risks, helping strengthen the resilience of the wider financial community.

    Access the ISAC portal

Customer Security Programme

Discover Swift Customer Security Programme

2 min view

Testimonials

Sebastian Neimeyer - BELLIN

Sebastian Neimeyer, Head of GTB Services, BELLIN, speaks about how the application provider is tackling cyber risk management, its self-attestation journey and how BELLIN is supporting its customers to attest against Swift’s Customer Security Controls Framework.

CSP Leading the change in compliance and security

Leading the change in compliance and security

Lloyds' CCRM 2020 screenshot

Sibos TV: Lloyds’ Counterparty Cybersecurity Risk Management programme

Live demo: hacker vs bank

Live Demo: Hacker vs Bank – the long awaited rematch

Resources

Access key resources for deeper insights and support

Document
Customer Security Controls Framework (CSCF) Customer Security Controls Framework (CSCF)
Document
Independent Assessment Framework Independent Assessment Framework
Web page
Directory of cyber security service providers Directory of cyber security service providers
Web page
Directory of Swift CSP Certified Assessors Directory of Swift CSP Certified Assessors
Document centre
External support
Trainings
Log in to CSP applications and portals

Become a CSP Certified Assessor

Swift’s CSP Assessor Certification Programme enhances assessor expertise and standardises practices to ensure consistent, high‑quality independent security assessments.

Read more

Related content

CSP

CSP: Understand controls

Understanding the controls is the essential first step in your CSP compliance journey.

CSP

CSP: Implement Controls

Once you’ve understood which controls apply to your organisation, the next step is to implement them effectively.

CSP

CSP: Perform an Independent Assessment

Independent assessment is a key step in validating your level of compliance with the applicable CSCF controls.

CSP

CSP: Submit KYC-Security Attestation

Submitting your annual Security Attestation is a key milestone in your CSP compliance journey.