SWIFT CSP Assessment and Auditing
This is where URM’s specialist conducts an independent assessment in order to verify your implementation of the CSCF mandatory controls against the criteria of ‘satisfied’, ‘partially satisfied’ and ‘not satisfied’. URM will assess your policies, processes, and business practices against CSCF requirements through interviews with key stakeholders, documentation review, site visits, and a review of your operations.
Get in touch
Please note, we can only process business email addresses.
Why URM?
Risk Management Expertise
Since 2002, URM has been developing and refining its risk assessment methodologies and processes to address the requirements of international standards and has developed a suite of purpose-designed risk management software products (Abriska).
Experience and Competence
URM is not only experienced in assisting organisations comply with the SWIFT CSCF, but also with PCI DSS, ISO 27001/ISO 27002 and NIST SP 800-53, the main standards against which the CSCF controls are mapped. URM has been involved in assisting hundreds of organisations comply with these standards and will ensure you fully leverage any artefacts gained in complying with these standards as part of your CSCF attestation.
Qualified Assessors
URM’s assessors have attained the required industry relevant professional certifications, e.g., PCI QSA, ISO 27001 lead auditors, CISA.
Company Accreditations
In addition to its 20 years’ experience of delivering practical solutions in the governance, risk and compliance (GRC) space, URM provides reassurance through its own certification to ISO 27001, ISO 22301 and Cyber Essentials Plus, as well as being a CREST-accredited penetration testing organisation.
ISO 27001 Clause 4.2, Understanding the Needs and Expectations of Interested Parties
URM's blog examines ISO 27001:2022 Clause 4.2, covering interested parties, their requirements and how these are addressed through the ISMS.
URM's blog explores ISO 27001 Clause 4.1 & how to identify organisational context, assess internal/external issues, and support effective ISMS decision-making.
URM's blog examines how the ISO 42001 management system requirements differ from ISO 27001, and the impact this has on what auditors will expect to see.
URM’s blog explores ISO 27001 Clause 9.1, what it requires and practical guidance on how to implement this Clause in full conformance with the Standard.