NEWS RELEASE
7th September 2020
BroadBand Security, Inc.

Start Providing Assessment and Consulting Service for Users of SWIFT～First Japanese company to become SWIFT CSP assessment provider～
We are pleased to announce that BroadBand Security, Inc. (Head Office: Shinjuku-ku, Tokyo;
CEO: Akira Mochizuka; "BBSec") has completed the registration to the Partner Program offeredby SWIFT (*1)and has been listed in “the Directory of CSP assessment providers” (*2)(*3).
Japan, Korea, Thailand, Malaysia, Myanmar and Vietnam are registered as objective countries
in that BBSec will provide CSP assessment service in APAC (Asia Pacific)region.
https://www.swift.com/myswift/customer-security-programme-csp_/communityengagement/assessment-providers-directory/

From 2020, SWIFT requires users connecting to its global financial messaging network
perform either an internal or external assessment on an annual basis.

toIn order to conduct a SWIFT external assessment, the assessment company must haveconducted an operational cyber security assessment within the last 12 months. This assessment
must have been performed as per an industry standard such as PCI DSS, ISO 27001, NIST SP
800-53, the NIST Cybersecurity Framework or simply CSP/CSCF .The assessors must hold one
or more qualifications such as a PCI DSS Assessor QSA (*4), Certified Information SystemsAuditor (CISA) or Certified Information Security Manager (CISM).
BBSec has 29 assessors (17 in Japan, 9in Korea, and 3 in Thailand) who meet this requirement,
including QSAs with extensive knowledge of PCI DSS audits, and will provide assessment
services to APAC (Asia Pacific) region.
We will provide high quality assessment and consulting services to SWIFT users based on theknowledge we have cultivated through security audits and consulting.
*1 SWIFT is a global member owned cooperative and the world’s leading provider of secure financial messaging services. We provide
our community with a platform for messaging and standards for communicating, and we offer products and services to facilitate
access and integration, identification, analysis and regulatory compliance.
Our messaging platform, products and services connect more than 11,000 banking and securities organisations, market
infrastructures and corporate customers in more than 200 countries and territories. While SWIFT does not hold funds or manage
accounts on behalf of customers, we enable our global community of users to communicate securely, exchanging standardised
financial messages in a reliable way, thereby supporting global and local financial flows, as well as trade and commerce all aroundthe world.
As their trusted provider, we relentlessly pursue operational excellence; we support our community in addressing cyber threats;
and we continually seek ways to lower costs, reduce risks and eliminate operational inefficiencies. Our products and services support
our community’s access and integration, business intelligence, reference data and financial crime compliance needs. SWIFT also
brings the financial community together – at global, regional and local levels – to shape market practice, define standards anddebate issues of mutual interest or concern. SWIFT’s strategic five year plan, SWIFT2020, challenges SWIFT to continue investingin the security, reliability and growth of its core messaging platform, while making additional investments in existing services anddelivering new and innovative solutions.
Headquartered in Belgium, SWIFT’s international governance and oversight reinforces the neutral, global character of its
cooperative structure. SWIFT’s global office network ensures an active presence in all the major financial centres.

*2 SWIFT does not certify, warrant, endorse or recommend any listed Provider; it remains the SWIFT customer's
responsibility to determine whether the Provider satisfies all necessary criteria to properly assist them in being
compliant towards the CSP Controls.
*3There are 19 foreign affiliated CSP assessment providers operating in Japan (as of Sep 3, 2020).
BBSec is the 20th company to be registered as CSP assessment provider, that is the first Japanese (domestic)
registered assessment company to offer assessment services in Japan.
*4 QSA (Qualified Security Assessor)
An international certification to perform the assessment for compliance with the Payment Card Industry Data
Security Standard (PCI DSS), an international security standard for credit cards.

BroadBand Security, Inc.is a total security service provider that provides IT security
assessment, operation, maintenance, and digital forensics. Since its establishment in November
2000, with the concept of "making Japan's IT network the most robust in the world", we havebeen providing security support for IT services to a wide range of companies, from major
corporations and telecommunication companies to IT ventures, by utilizing our hightechnological capabilities, extensive experience, and broad information gathering
capabilities.
URL：https://www.bbsec.co.jp/