SWIFT Customer Security Programme with
Ekran System

A single flexible software platform to empower your compliance

WHAT IS SWIFT CUSTOMER SECURITY PROGRAMME

The SWIFT Customer Security Programme (CSP) was started in 2017 and updated in 2019. The SWIFT CSP obliges any financial organization that uses SWIFT services to fully comply with 19 mandatory security controls by the beginning of 2020 and to take all reasonable efforts to meet 10 advisory security controls that together comprise the SWIFT Customer Security Controls Framework.

This framework translates industry security best practices and guidelines into three key objectives:

Secure your environment
Know and limit access
Detect and respond

To meet SWIFT security requirements, companies need to:

Audit their current infrastructure to define specific requirements and limitations
Evaluate deployed security products and policies against mandatory controls
Develop a policy update plan to ensure compliance while relying on existing tools
Consider deploying specific software that meets both mandatory and advisory controls

The Ekran System^® insider threat protection platform is your powerful ally in adopting SWIFT Customer Security Controls.

Servers, jump servers, and desktops
Virtual and physical infrastructures
Any network architecture and hybrids
All essential features combined

The most complete set of supported platforms

Secure your SWIFT infrastructure with Ekran System

Secure your environment
Know and limit access
Detect and respond

Secure your environment

Deploy Ekran System to control the use of admin accounts, protect local SWIFT infrastructure from third-party vendor-related risks, and prevent unauthorized access to critical assets.

Ekran System covers controls 1.1, 1.2, 1.3A, 2.8A, and 3.1 thanks to these features:

SWIFT username monitoring to identify users logged into the SWIFT network
Secondary authentication to identify users of shared accounts and control their access
Out-of-the-box support for virtual environments to protect virtualization platforms
Password management to grant protected third-party access to the secure zone
Temporary access permissions that can be reviewed, extended, or revoked
USB device management and monitoring for blocking prohibited devices and restricting access to specific USB ports

Know and limit access

Enforce need-to-know access, the principle of least privilege, and segregation of duties for operator accounts while securing SWIFT systems with multi-factor authentication using Ekran System.

Ekran System covers controls 4.2, 5.1, and 5.4 thanks to these features:

A free two-factor authentication tool for secure authentication
Password management to secure credentials and mask symbols entered in password fields
One-time passwords that can be generated automatically or manually by security administrators
Integration with ticketing systems for validating the purpose of actions
Password Vault for encrypted and secure password storage
Privileged access management to monitor and audit privileged activity

Detect and respond

Comply with the SWIFT Customer Security Controls Framework and secure your local SWIFT environment by recording events and detecting malicious actions. Enhance your cybersecurity incident response planning with Ekran System’s centralized UI for analyzing incidents and reacting to any that are detected.

Ekran System covers controls 6.4 and 7.1 thanks to these features:

Video recording to log user sessions in a searchable video format and provide remote IP addresses and host details
Audio recording to capture input and output audio streams on endpoints
User activity recording that can be configured to create screen captures for each event or when a certain action is taken
User and entity behavior analytics to detect abnormal user activity
Real-time alerts and notifications that are automatically sent in case of a security incident
Incident response tools to help in detecting and preventing malicious activity: Automatic and manual session termination, Application and process termination, User warning and blocking, etc.
Powerful reporting and investigation functionality for robust incident management
Session recordings that can be exported for forensic examination