Swift oversight
Table of contents
Swift’s oversight objectives center on risk identification and management, information security, reliability and resilience, technology planning, and communication with users.
Central banks have the explicit objective of fostering financial stability and promoting the soundness of payment and settlement systems.
While Swift is neither a payment nor a settlement system, and is therefore not regulated as such by central banks or bank supervisors, it is subject to central bank oversight as a critical service provider. A large and growing number of systemically important payment systems have become dependent on Swift, which has thereby acquired a systemic character.
As a result, the central banks of the G-10 countries agreed that Swift should be subject to cooperative oversight by central banks. Swift has been subject to oversight since 1998.
The arrangement was last reviewed in 2012 when the Swift Oversight Forum was set up. Information sharing on Swift oversight activities was thereby expanded to a larger group of central banks.
An open and constructive dialogue
Swift is committed to an open and constructive dialogue with its oversight authorities. The National Bank of Belgium (NBB) acts as the lead overseer, as Swift is incorporated in Belgium, and is supported by the G-10 central banks. The oversight primarily focuses on ensuring that Swift has effective controls and processes to avoid posing a risk to the financial stability and the soundness of financial infrastructures.
Other central banks also have a legitimate interest in, or responsibility for, the oversight of Swift, given Swift’s role in their domestic systems. As is generally the case for payment systems oversight, the main instrument for oversight of Swift is moral suasion.
Overseers place great importance on the constructive and open dialogue that is conducted on the basis of mutual trust with the Swift Board and senior management. Through this dialogue, overseers formulate their recommendations to Swift.
A protocol signed between the NBB and Swift lays down the common understanding of overseers and Swift. The protocol covers the oversight objectives and the activities that are undertaken to achieve those objectives. The protocol is revised periodically to reflect evolving oversight arrangements.
Objectives, areas of interest and limitations
In their review, overseers seek assurances that Swift has put in place appropriate governance arrangements, structures, processes, risk management procedures and controls that enable it to effectively manage potential risks to financial stability and to the soundness of financial infrastructures, to the extent that they are under Swift’s control.
In 2007 the overseers developed specific oversight expectations applicable to Swift, known as the ‘High level expectations for the oversight of Swift’ (HLEs). The High Level Expectations document the five categories of expectations that overseers have vis-à-vis the services Swift provides to the global financial infrastructure. The five Expectations relate to: risk identification and management, information security, reliability and resilience, technology planning, and communication with users.
Overseers review Swift’s identification and mitigation of operational risks, including cyber security, and may also review legal risks, transparency of arrangements and customer access policies. The overseers may also discuss Swift’s strategic direction with the Swift Board and senior management.
This list of oversight fields is indicative, not exhaustive. Overseers will undertake those activities that provide them comfort that Swift is paying proper attention to the objectives described above. Nevertheless, Swift continues to bear the responsibility for the security and reliability of its systems, products and services. The oversight of Swift does not grant Swift any certification, approval or authorization.
International cooperative oversight
As lead overseer, the NBB conducts the oversight of Swift together with the G-10 central banks: Banca d’Italia, Bank of Canada, Bank of England, Bank of Japan, Banque de France, De Nederlandsche Bank, Deutsche Bundesbank, European Central Bank, Sveriges Riksbank, Swiss National Bank, and the Federal Reserve System (USA), represented by the Federal Reserve Bank of New York and the Board of Governors of the Federal Reserve System.
In the Swift Oversight Forum, these central banks are joined by other central banks from major economies: Bank of Indonesia, Bank of Korea, Bank of Mexico, Bank of Spain, Central Bank of Brazil, Central Bank of the Argentine Republic, Central Bank of the Republic of Turkey, Central Bank of the Russian Federation, Hong Kong Monetary Authority, Monetary Authority of Singapore, the People’s Bank of China, Reserve Bank of Australia, Reserve Bank of India, Saudi Arabian Monetary Agency, and South African Reserve Bank. The Swift Oversight Forum provides a forum for the G-10 central banks to share information on Swift oversight activities with a wider group of central banks.
Oversight structure - oversight meetings
The NBB monitors Swift on an ongoing basis. It identifies issues relevant to Swift oversight through the analysis of 6 documents provided by Swift and through discussions with Swift management. The NBB maintains a close relationship with Swift, with regular ad-hoc meetings, and serves as the central banks’ entry point for the cooperative oversight of Swift.
In this capacity, the NBB chairs the senior policy and technical groups that facilitate the cooperative oversight, provides the secretariat and monitors the follow-up of any decisions taken.
Access to information
In order to achieve their oversight objectives, the overseers need timely access to all information that they consider relevant. Typical sources of information are Swift Board papers, security audit reports, incident reports and incident review reports. Presentations by Swift staff and management represent another important source of information for the overseers.
Finally, Swift assists the overseers in identifying internal Swift documents that might be relevant to address specific oversight questions. Provisions on the confidential treatment of non-public information are included both in the protocol between the NBB and Swift, and in the bilateral Memoranda of Understanding between the NBB and each of the other cooperating central banks. The official description of the NBB’s oversight role can be found in the Financial Market Infrastructures and Payment Services Report published by the National Bank of Belgium and is available on its website nbb.be.
