Skip to main content

CSP-Assessor Customer Security Programme Assessor Certification

  • Swift
  • 4 free sample questions

About this exam

CSP-Assessor is the Swift exam Customer Security Programme Assessor Certification. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
CSP-Assessor
Vendor
Swift
Practice questions
Not available yet
Free sample questions
4
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for CSP-Assessor.

Question 1

Can a Swift user choose to implement the security controls (example: logging and monitoring) in
systems which are not directly in scope of the CSCE?

\

  1. Option A:
    True
  2. Option B:
    False
Show answer and explanation

Correct answer: A

SWIFT Customer Security Programme (CSP) / CSCF-related documents, including:
  • Security Controls Policy
  • Security Controls Framework v2024
  • Independent Assessment Framework
  • Assessor Guidelines
  • Test Plan Guidelines
  • Outsourcing Agents Security Baseline
  • CSP Architecture Decision Tree
  • Mandatory and Advisory Control Templates

Question 2 (choose 2)

Swift user relies on a sFTP server to connect through an externally exposed connection with a
service provider or a group hub What architecture type is the Swift user? (Choose all that apply.)


  1. Option A:
    A1
  2. Option B:
    A2
  3. Option C:
    A3
  4. Option D:
    A4
Show answer and explanation

Correct answer: B, D

A SWIFT user that relies on an SFTP server to connect through an externally exposed connection with a service provider or a group hub is classified as both an A2 and A4 architecture type. It falls under A2 because the user connects to the SWIFT environment indirectly through an external service provider rather than operating the full SWIFT infrastructure independently. It also qualifies as A4 because the connection is established through a shared service arrangement, such as a service provider or group hub, where connectivity and related services are managed on behalf of the user. Since the organization depends on an externally exposed SFTP connection provided by another party and does not maintain a direct SWIFT interface itself, both architecture types apply. Therefore, A2 and A4 are the correct ch
See all 4 free sample questions