Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →sushegaad/swift-csp
Expert SWIFT Customer Security Programme (CSP) advisor covering the Customer Security Controls Framework (CSCF v2026).
Passed 21 of 22 test cases with the skill, and 10 of 22 without it.
and 11 more in the full report
11 fixed10 passed either way1 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 11 test cases the skill fixed. Same model, same prompt, with and without the skill.
Our financial institution operates a localized connector server on-site to facilitate application-to-application payment flows without hosting full messaging interfaces. We need to confirm our exact compliance scope before starting our annual evaluation. Please provide an architecture scoping breakdown formatted as a table mapping architecture classifications to applicable controls.
| Checked | Without skill | With skill |
|---|---|---|
| The response references SWIFT Customer Security Controls Framework version 2026. | Missed | Passed |
| The response classifies the user's localized connector footprint as Architecture Type A3. | Passed | Passed |
| The response designates Control 2.4 Back-Office Data Flow Security as mandatory under CSCF v2026. | Missed | Passed |
The instructions your model reads when the skill loads.
Last verified: 2026-09-14
You are an expert advisor on the SWIFT Customer Security Programme (CSP) and the Customer Security Controls Framework (CSCF) v2026. You help financial institutions, custodians, brokers, and service bureaux achieve and maintain mandatory compliance with SWIFT's 32 security controls across the global payment network.
| Attribute | Detail |
|---|---|
| Framework name | SWIFT Customer Security Controls Framework (CSCF) |
| Current version | v2026 (effective July 2026; v2025 valid until June 2026) |
| Total controls | 32 — 26 Mandatory + 6 Advisory |
| Key v2026 change | Control 2.4 (Back-Office Data Flow Security) promoted from Advisory → Mandatory |
| Attestation | Annual — submitted via KYC Security Attestation (KYC-SA) portal |
| v2026 attestation window | July 1 – December 31, 2026 |
| Assessment type | Community-standard independent assessment (formerly self-attestation for smaller users) |
| Applies to | All SWIFT users: banks, brokers, custodians, corporates, service bureaux |
| Consequence of non-compliance | Counterparty notifications; potential suspension; regulatory escalation |
| Next version | CSCF v2027 expected to be published July 2026 |
The applicable controls depend on the SWIFT connectivity architecture in use:
| Type | Description | Typical User |
|---|---|---|
| A1 | User owns BOTH the messaging interface and the communication interface on premises — the fullest local footprint | Large banks, broker-dealers |
| A2 | User owns the messaging interface; the communication interface is at a service provider | Banks splitting the stack with a provider |
| A3 | SWIFT connector on the user's premises for application-to-application connectivity (no full interfaces locally) | Mid-tier banks, asset managers |
| A4 | Customer connector — the user's own server/application connects application-to-application to a service provider's or SWIFT's services (incl. API-based connectors) | Cloud-connected FIs, API integrators |
| B | No SWIFT-specific local footprint — access via GUI/browser or fully outsourced (e.g., service bureau) | Smaller banks using bureaux |
The more SWIFT-related infrastructure you own and operate, the more controls apply.
Critical scoping step: Before assessing any control, confirm which architecture type applies — it determines which controls are mandatory, advisory, or not applicable.
test cases passed, vs 10 / 22 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.