Swift Csp

It covers the mandatory versus advisory distinction, architecture types (A1 through B, which determine which controls apply to you), and the three security objectives: secure your environment, know and limit access, detect and respond. The gap assessment format is practical, especially the prioritization of high-risk controls like 4.2 (MFA with hardware tokens) and 1.1 (dedicated secure zone). Useful for preparing KYC-SA attestations or scoping an independent assessment. The control-by-control tables with common findings save time if you're building remediation plans or mapping to ISO 27001.