The SWIFT Customer Security Controls Framework (CSCF) is a set of cybersecurity requirements developed by SWIFT for all institutions using its financial messaging network. The CSCF comprises both mandatory and advisory security controls, designed to protect SWIFT users against evolving cyber threats and to ensure the integrity and security of global financial transactions. The framework is structured around three main objectives: securing the operating environment, knowing and limiting access, and detecting and responding to threats. These objectives are further divided into seven core principles, covering areas such as restricting internet access, managing identities, preventing credential compromise, monitoring for anomalous activity, and planning for incident response. The CSCF is updated annually to address new risks, and compliance is mandatory for all SWIFT users, helping to establish a consistent security baseline across the financial industry.
Home / Function (NIST CSF 2.0) / GV - Govern / OC - Org. Context
Swift Customer Security Controls Framework (CSCF)
This document focuses on:Finance