SWIFT CSCF mandatory and advisory controls
Explains how the 32 CSCF v2026 controls split into mandatory and advisory, what each status means for attestation, how controls move from advisory to mandatory, and what changed in v2026.
SWIFT CSCF guides
Buyer questions Swift users ask about the CSP: which controls are mandatory, how the independent assessment works, which architecture type applies and how the yearly attestation cycle runs.
SWIFT CSCF independent assessment
Explains the independent assessment every Swift user needs behind its attestation: internal versus external assessors, Swift's assessor qualification expectations, the optional CSP Assessor Certification and when a prior assessment can be reused.
SWIFT CSCF architecture types
Explains the five CSCF reference architectures (A1, A2, A3, A4 and B), how component and licence ownership decides which one applies, and how the choice changes the controls in scope.
SWIFT CSCF attestation cycle
Explains the yearly CSP cycle: when Swift publishes each CSCF version, the July to December KYC-SA attestation window, what new joiners must do, and what happens when an attestation is missing or non-compliant.
