How to prepare for the annual Customer Security Controls Framework (CSCF) assessment?

Less than three months remain before the start of the annual independent assessment of Swift infrastructure security controls — Customer Security Controls Framework (CSCF) v2026.

CSCF is not just a formal requirement, but a critical milestone for every organization working with Swift. To go through the assessment confidently and without surprises, preparation should be systematic and well-structured.

Here are 5 key steps to help financial institutions get ready:

✅ Review the updated documentation
Download and carefully study the latest version of CSCF, Attestation Form, Implementation Guidelines, and Frequently Asked Questions available on the Swift portal. Pay special attention to new or updated controls.

✅ Analyze infrastructure changes
Collect and review all changes that occurred during the year: new systems, upgrades, migrations, and new service integrations. Every change may impact compliance with Swift CSCF v2026 requirements.

✅ Conduct a GAP analysis of current configurations
Verify compliance of all technical controls, including:
• network segmentation and isolation of critical systems
• access management (MFA, least privilege principle)
• monitoring and incident detection
• data protection and cryptography
• physical security and more.

✅ Review weaknesses and findings from the previous assessment
Revisit the results of the last assessment and ensure that all requirements, comments, and recommendations related to identified non-conformities have been addressed.
If any gaps remain, they should become key priorities in your 2026 preparation plan.

✅ Select a qualified assessment team
Choosing a qualified independent assessment team ensures not only high-quality CSCF compliance verification, but also minimizes stress for staff, optimizes the assessment timeline, and increases overall efficiency. In addition, proper preparation helps improve your organization’s cybersecurity posture and readiness for external ISMS audits.

ProFIX Group is fully authorized to perform independent external assessments under the Swift Customer Security Programme.
Contact us: SwiftSCP@profixgroup.eu

#CSCF #Swift #Cybersecurity #Compliance #ITSecurity #SwiftAssessment