CSP-Assessor 試験問題を無料オンラインアクセス

Can an assessor re-use an ISAE 3000 report dating back 2 years to support an independent assessment?

• A.Yes, there is no time limit for an iSAE 3000 report
• B.Yes, provided there is no change to the Swift user's infrastructure
• C.No, the SAE 3000 report is no validsurrogateas a rule
• D.No, that is too old, the maximum is 18 months

Select the environment that is not in scope in a SWIFT user CSP assessment (assuming the environments are separated).
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template

• A.Development
• B.SWIFT infrastructure (sometimes known as Live)
• C.Disaster Recovery
• D.Cold backup systems

When hesitant on the applicability of a CSCF control to a particular component? What steps should you take?
(Choose all that apply.)

• A.Check appendix F of the CSCF
• B.Call your Swift contact
• C.Open a case with Swift support via the case manager on swift com if further information or solution cannot be found in the documentation
• D.Check carefully the Introduction section of the CSCF

From the outsourcing agent diagram, which components in the diagram are in scope and applicable for the Swift user.

• A.Components C, D and E
• B.Components A and B
• C.None of the above
• D.Components A, B, C, D and E

Is the restriction of Internet access only relevant when having SWIFT-related components in a secure zone?
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls

• A.No, because there can be in-scope general operator PCs used to access a SWIFT-related application hosted at a service provider
• B.Yes, because if there is no secure zone, then the internet connectivity does not need to be restricted