There are two forms in which a SWIFT customer can gain an independent assessment
An internal assessment : The internal audit needs to be carried out as per the internal audit function of the customer and independent from the function submitting the attestation.
An external assessment : An external audit can be carried out by QRC, an assessment against the CSP controls.