topic Re: Does anyone have access to the SWIFT Security documentation? in Industry News

Does anyone have access to the SWIFT Security documentation?

Caute_cautim — Wed, 10 Apr 2019 21:09:43 GMT

Hi All

I need to understand the SWIFT mandatory security controls and architecture for an RFP. I understand there is 16 mandatory controls?

Many thanks

Caute_cautim

Re: Does anyone have access to the SWIFT Security documentation?

AlecTrevelyan — Wed, 10 Apr 2019 21:18:39 GMT

Is this what you're looking for or do you need something more detailed?

https://www.swift.com/myswift/customer-security-programme-csp_/security-controls/2019

Re: Does anyone have access to the SWIFT Security documentation?

Caute_cautim — Wed, 10 Apr 2019 21:23:50 GMT

@AlecTrevelyanThank you very much, if you have any more detailed to get my teeth into would be appreciated. If you cannot, I fully understand. This is a good starting point.

Thank you

Regards

Caute_cautim

Re: Does anyone have access to the SWIFT Security documentation?

AlecTrevelyan — Wed, 10 Apr 2019 21:27:11 GMT

I don't have a login but they have quite a few docs that might be of assistance that are publicly available:

https://www.swift.com/myswift/customer-security-programme-csp/document-centre?tl=en#topic-tabs-menu

Re: Does anyone have access to the SWIFT Security documentation?

Caute_cautim — Wed, 10 Apr 2019 21:34:51 GMT

@AlecTrevelyanThank you once again, managed to obtain a login to the first tier, need to get associated with a friendly bank to get to the next level. This gives me an awesome start on a tricky road.

Once again many thanks indeed.

Regards

Caute_cautim

Re: Does anyone have access to the SWIFT Security documentation?

AlecTrevelyan — Sun, 14 Apr 2019 10:34:37 GMT

I saw this on LinkedIn and thought about this thread - it's an infographic of hacks involving the SWIFT system:

https://media.licdn.com/dms/image/C5622AQEe_lXpw3lrRw/feedshare-shrink_8192/0?e=1557964800&v=beta&t=QNy1w2hRWLITzVxMr8IMek0fBGBAisvMMqZ-wcCVaS4

This is dated 2016 and it says it will be continuously updated so I did a quick search but wasn't able to find a newer version (I can't believe there haven't been any more since then), but it could be helpful for you to frame your RFP response.

Re: Does anyone have access to the SWIFT Security documentation?

BillyAnglin — Wed, 17 Apr 2019 02:43:55 GMT

There's Compliance package available for the Eramba GRC system. You can use the spreadsheet, provided in the eramba documentation, or use the community or enterprise version of the platform to work out the documentation and policies for the standard.