SWIFT Customer Security Programme (CSP) Attestation

SWIFT has taken proactive measures to empower its global customer base in the ongoing battle against cyber threats.

To support the industry, SWIFT has implemented a set of mandatory and advisory security controls under their Customer Security Programme (CSP). These controls have evolved with new and arising threats, the development of security-related regulations in primary jurisdiction, developments in cybersecurity practice, further technology usage, and feedback provided by the SWIFT community.

In adherence to this programme, SWIFT’s customers are obligated to affirm their compliance with all essential security controls on an annual basis. Recognising the evolving landscape of cybersecurity, SWIFT introduced a new mandate in 2021, an independent assessment is now a requisite component of every customer’s compliance attestation, reinforcing the commitment to security excellence across the SWIFT community.

How AJC Can Help

AJC operates globally from its UK headquarters, and Asia, with a team of over 30 experienced consultants. What makes our auditors stand out is their firsthand experience from the other side of audits. We can add more auditors to our teams if needed for specific business requirements.

Our consultants are strategically located in the UK and Asia but cover mainland Europe, Africa, Asia, the USA, Australia and other APAC regions. We offer a fully remote audit service and we have audited as far as Papua New Guinea, Fiji and Tonga. We’re also capable of engaging in various languages, including French, German, and Russian, to best serve our clients.

AJC is a trusted partner in SWIFT compliance for a broad range of organisations, in many different sectors including banks, building societies, investment firms, financial services, oil companies, airlines, pensions providers, and payments processors. Our expanding list of clients demonstrates our commitment to tailored compliance solutions, catering to the specific needs of each sector. We take pride in our ability to adapt to the unique requirements of each client.

Cyber Essentials Plus Certified

AJC's Services

SWIFT CSP Coverage: AJC Cyber Consulting Arm
AJC CSP Assessment Service
AJC can help you by performing:

SWIFT CSP Coverage: AJC Cyber Consulting Arm

Our adherence to the CSP mandates the use of the CSCF Audit Standard. This requirement ensures that our services are in alignment with industry standards and best practices, bolstering your organisation’s cybersecurity efforts.

Whether your organisation connects directly to SWIFT or uses a Bureau, our expertise extends to both scenarios, providing flexibility and adaptability to meet your unique operational requirements.

We audit all SWIFT reference architectures A1-A4 and B, and cover all topologies from on-premises hosting, colocation data centre use, and Cloud/SaaS solutions. We cover all technologies such as Windows, Linux, and Azure/AWS/Google public cloud providers.

AJC CSP Assessment Service

AJC offers a three-stage recurring year-round service designed to simplify compliance for organisations.

This comprehensive service encompasses attestation readiness and assessment ‘after-care,’ ensuring that your compliance needs are addressed at every stage. We understand that maintaining compliance can be complex, and our aim is to streamline the process for you.

Our team at AJC comprises industry-qualified and certified SWIFT external assessors, providing you with the assurance that you’re working with experts in the field. We are well-versed in the intricacies of SWIFT compliance, and our certification of compliance with SWIFT CSP empowers your organisation to feel in control throughout the certification process.

In addition to certification, we also offer assistance in remediating non-compliance areas. Our experienced consultants possess the knowledge and expertise needed to help organisations better prepare for the certification process, ensuring that your systems and operations meet the required standards.

AJC can help you by performing:

Pre-Attestation Review

Review of organisations’ compliance in relation to the CSP, including both mandatory and advisory control
Review of current measures in place
Recommendations and opinions regarding remediation in areas of non-compliance
Evaluation of readiness for certification

Independent Assessment

Certification of organisations’ compliance with the CSP framework
Assessment will include sampling of appropriate evidence

Post Assessment Support

Online customer guides
Ongoing support and assistance around the CSP, helping clients feel in control
Keeping abreast of revisions to the CSCF standard and offering guidance
Access to support teams and SMEs year round

Our services are tailored to each individual business, aimed at delivering outstanding value and the appropriate, proportionate solution.

Download our brochure to find out more

Testimonial

“We’ve worked with AJC for a number of years and I can’t fault their professionalism and pragmatic approach.”

Adam Evetts, The Tipton and Cosely Building Society