The Standard of Good Practice for Information Security

The Standard of Good Practice is a key deliverable from the ISF’s extensive work programme. It has been developed and enhanced over a number of years and has benefited from the results of the many projects run by the ISF.

As the ISF is a membership organisation, ISF reports are normally for the exclusive use of ISF Members. However, the ISF has made The Standard of Good Practice available to non-Members with the objectives of:

• promoting good practice in information security in all organisations worldwide

• helping organisations which are not Members of the ISF to improve their level of security and to reduce their information risk to an acceptable level

• assisting in the development of standards that are practical, focused on the right areas, and effective in reducing information risk.

The Standard has been developed using a proven methodology to produce the international benchmark for information security. The Standard is updated regularly, refining proven practices and addressing 'hot topics’.

The ISF runs a comprehensive Information Security Status Survey that enables Members to gain a clear picture of their organisation's performance across all aspects of information security. The Survey provides a practical, automated tool with which a Member organisation can measure the effectiveness of their information security arrangements, compare them with those of other leading organisations, and assess how well they are performing against The Standard of Good Practice.