Exam CSP-Assessor Topic 3 Question 19 Discussion
Actual exam question for Swift's CSP-Assessor exam
Question #: 19
Topic #: 3
Question #: 19
Topic #: 3
For which reasons (as per the "CSP Independent Assessment Process for Assessors Guidelines") is it required to keep minutes of all key meetings related to a CSP assessment process (examples: kick-off, scope definition, exit meeting)? (Select all answers that apply)
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template
*Swift Customer Security Controls Policy
*Swift Customer Security Controls Framework v2025
*Independent Assessment Framework
*Independent Assessment Process for Assessors Guidelines
*Independent Assessment Framework - High-Level Test Plan Guidelines
*Outsourcing Agents - Security Requirements Baseline v2025
*CSP Architecture Type - Decision tree
*CSP_controls_matrix_and_high_test_plan_2025
*Assessment template for Mandatory controls
*Assessment template for Advisory controls
*CSCF Assessment Completion Letter
*Swift_CSP_Assessment_Report_Template
Suggested Answer: A,B,C Vote an answer
The "Independent Assessment Process for Assessors Guidelines" mandates record-keeping for CSP assessments. Let's evaluate each option:
*Option A: To support quality review (audit) processes
This applies. Minutes are required to facilitate quality reviews or audits by SWIFT or third parties, ensuring assessment integrity, as per the guidelines.
*Option B: For documentation purpose
This applies. Documentation is a core requirement to maintain a record of decisions and findings, supporting the "Swift_CSP_Assessment_Report_Template" and assessment traceability.
*Option C: To keep key information that can be used as input for the next step in the assessment process This applies. Minutes capture critical details (e.g., scope changes) that inform subsequent assessment phases, aligning with the assessment workflow.
*Option D: To be uploaded in KYC-SA at the end of the assessment (mandated by SWIFT) This does not apply. The KYC-SA portal requires the assessment report and completion letter, not meeting minutes, as per the "Independent Assessment Framework." Summary of Correct Answers:
Minutes are kept to support quality reviews (A), for documentation (B), and as input for the next step (C).
References to SWIFT Customer Security Programme Documents:
*Independent Assessment Process for Assessors Guidelines: Mandates minutes for these purposes.
*Independent Assessment Framework: Supports documentation and review.
*Swift_CSP_Assessment_Report_Template: Relies on documented records.
========
*Option A: To support quality review (audit) processes
This applies. Minutes are required to facilitate quality reviews or audits by SWIFT or third parties, ensuring assessment integrity, as per the guidelines.
*Option B: For documentation purpose
This applies. Documentation is a core requirement to maintain a record of decisions and findings, supporting the "Swift_CSP_Assessment_Report_Template" and assessment traceability.
*Option C: To keep key information that can be used as input for the next step in the assessment process This applies. Minutes capture critical details (e.g., scope changes) that inform subsequent assessment phases, aligning with the assessment workflow.
*Option D: To be uploaded in KYC-SA at the end of the assessment (mandated by SWIFT) This does not apply. The KYC-SA portal requires the assessment report and completion letter, not meeting minutes, as per the "Independent Assessment Framework." Summary of Correct Answers:
Minutes are kept to support quality reviews (A), for documentation (B), and as input for the next step (C).
References to SWIFT Customer Security Programme Documents:
*Independent Assessment Process for Assessors Guidelines: Mandates minutes for these purposes.
*Independent Assessment Framework: Supports documentation and review.
*Swift_CSP_Assessment_Report_Template: Relies on documented records.
========
by Kenneth at May 24, 2025, 09:55 PM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).