Does anyone have access to the SWIFT Security documentation?

[Caute_cautim]

Hi All

I need to understand the SWIFT mandatory security controls and architecture for an RFP.  I understand there is 16 mandatory controls?

Many thanks

Caute_cautim

[AlecTrevelyan]

Is this what you're looking for or do you need something more detailed?

https://www.swift.com/myswift/customer-security-programme-csp_/security-controls/2019

[Caute_cautim]

@AlecTrevelyanThank you very much, if you have any more detailed to get my teeth into would be appreciated.   If you cannot, I fully understand.  This is a good starting point.

Thank you

Regards

Caute_cautim

[AlecTrevelyan]

I don't have a login but they have quite a few docs that might be of assistance that are publicly available:

https://www.swift.com/myswift/customer-security-programme-csp/document-centre?tl=en#topic-tabs-menu

[Caute_cautim]

@AlecTrevelyanThank you once again, managed to obtain a login to the first tier, need to get associated with a friendly bank to get to the next level.   This gives me an awesome start on a tricky road. 

Once again many thanks indeed.

Regards

Caute_cautim

[AlecTrevelyan]

I saw this on LinkedIn and thought about this thread - it's an infographic of hacks involving the SWIFT system:

https://media.licdn.com/dms/image/C5622AQEe_lXpw3lrRw/feedshare-shrink_8192/0?e=1557964800&v=beta&t=...

This is dated 2016 and it says it will be continuously updated so I did a quick search but wasn't able to find a newer version (I can't believe there haven't been any more since then), but it could be helpful for you to frame your RFP response.

[BillyAnglin]

There's Compliance package available for the Eramba GRC system. You can use the spreadsheet, provided in the eramba documentation, or use the community or enterprise version of the platform to work out the documentation and policies for the standard.