SWIFT CSP Independent Assessment

The Oregon State Treasury is soliciting proposals for a SWIFT Customer Security Programme (CSP) Independent Assessment to verify compliance with the mandatory controls of the SWIFT Customer Security Controls Framework (CSCF). The selected vendor must be a SWIFT-certified independent assessor capable of delivering a formal assessment report conforming to SWIFT IAF Section 7.1 and a signed SWIFT completion letter. The project involves evaluating Treasury-owned controls and utilizing BlackRock Aladdin attestations where applicable. The estimated contract value exceeds 500,000 dollars, with a response deadline of September 11, 2026. Qualified proposers must provide proof of SWIFT CSP Assessor certifications for all key personnel and submit a comprehensive proposal including a price schedule, reference checks, and responsibility certifications. The contract is governed by Oregon law and requires strict confidentiality regarding the state's financial and IT security measures, with a mandatory 24-hour breach notification window. Payment is processed within 45 days of invoice receipt. Evaluation is based on the highest-ranking responsible proposer, with additional consideration given to the scope of any requested exceptions to the sample contract and participation from COBID-certified firms.