CSP-Assessment

As one of the first Swift Service Bureaus in the Eurozone with about 50 connected BICs, our Security and Compliance department has always been involved in cyber security assessments for customers. Our customers come from both the highly regulated banking environment and the area of industrial global players with a strong cyber security defense. We have many years of wide-ranging audit experience in these two customer areas. Almost all of our audits have intersections with the topic of cybersecurity. In particular, our commitments and audits in the SIC endpoint security attestation of the Swiss National Bank, the SWIFT CSP audit, the ISAE 3402 attestation, the ISO 27001 certification and the KRITIS audits should be mentioned here. In Germany, we are considered critical infrastructure (KRITIS) and are therefore subject to monitoring and regular auditing by the German Federal Office for Information Security (BSI).  We have outsourced our IT auditing to an external auditing firm and are regularly audited by them.

As a certified SWIFT Service Bureau, we are also subject to regular SWIFT audits of the Shared Infrastructure Programme (SIP).

As part of the SWIFT Customer Security Program (CSP), we have supported several of our customers in the CSP attestation as auditors in recent years. As a certified SWIFT CSP Assessment Provider, we want to continue to support our SWIFT Service Bureau customers with CSP attestation and carry out further external CSP assessments with several employees as certified Swift External CSP Certified Assessor.