Customer Security Programme Guidance for Controls Framework

This guide provides detailed information regarding the Customer Security Programme (CSP) and the associated Customer Security Controls Framework (CSCF) v2025. It outlines the mandatory controls that Swift users must adhere to in order to enhance payment security and mitigate cyber fraud risks. The document includes sections on restricting internet access, reducing attack surfaces, securing physical environments, managing identities, and detecting anomalous activities. It emphasizes the importance of conducting independent assessments annually for compliance, either through internal or external evaluations. The guide also discusses the significance of implementing security updates, system hardening, and maintaining the integrity of data flows. Additionally, it highlights the role of Bottomline in assisting clients to meet these security standards and encourages collaboration with IT teams to ensure compliance with the outlined controls. The document serves as a resource for understanding the requirements and best practices for maintaining a secure operational environment.