SWIFT CSCF
What is SWIFT CSCF?
SWIFT Customer Security Controls Framework. It comprises 34 controls organised across 15 domains, and applies in International.
How SWIFT CSCF maps to other frameworks
All 34 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 15 domains SWIFT CSCF groups its controls into
Frameworks that share controls with SWIFT CSCF
Each of these has at least one control mapped to a control in SWIFT CSCF. The number is how many SWIFT CSCF controls are shared, counted from the mapping graph.
FDA Quality Management System Regulation (QMSR)
4 shared controlsNIST SP 800-171A Rev 3 - Assessing CUI Security Requirements
3 shared controlsBRCGS Global Standard for Food Safety Issue 9
3 shared controlsSQF Code Edition 9 - Safe Quality Food
3 shared controlsPCI DSS 4.0
3 shared controlsFSSC 22000 - Food Safety System Certification
3 shared controlsGS1 Global Standards - Supply Chain Traceability and Data Security
3 shared controlsACSC Essential Eight
3 shared controlsTraining on frameworks that overlap SWIFT CSCF
There is no course on SWIFT CSCF itself. These cover frameworks that share controls with it, so the material carries across even though the standard named is different.
Where SWIFT CSCF overlaps with the standards you already hold
What an auditor will ask you for
All 34 SWIFT CSCF controls, each with what it requires, the artefacts an auditor will ask you for, and where it commonly fails. Free to read, nothing to fill in.
Read the SWIFT CSCF evidence request listWhat SWIFT CSCF means in your sector
What SWIFT CSCF means for your job
Questions people ask about SWIFT CSCF
What is SWIFT CSCF?
Where does SWIFT CSCF apply?
What frameworks does SWIFT CSCF map to?
How do I get started with SWIFT CSCF compliance?
Query SWIFT CSCF programmatically
SWIFT CSCF, its 34 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
SWIFT CSCF API reference and MCP config →What SWIFT CSCF requires, control by control
Each page carries the requirement text for one SWIFT CSCF control and what an assessor expects to see as evidence.
- SWIFTCSCF-1 Restrict Internet Access and Protect Critical Systems (Objective 1)
- SWIFTCSCF-2 Reduce Attack Surface and Vulnerabilities (Objective 2)
- SWIFTCSCF-3 Physically Secure the Environment (Objective 3)
- SWIFTCSCF-4 Prevent Compromise of Credentials (Objective 4)
- SWIFTCSCF-5 Manage Identities and Segregate Privileges (Objective 5)
- SWIFTCSCF-6 Detect Anomalous Activity (Objective 6)
- SWIFTCSCF-7 Plan Incident Response (Objective 7)
How ready are you for SWIFT CSCF?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.