The Standard of Good Practice for Information Security

The  Standard  of  Good  Practice  for  Information  Security  (the  Standard)  has  been  produced  by  the Information Security Forum  (ISF), an  international association of over 300  leading organisations which fund  and  co-operate  in  the  development  of  a  practical  research  programme  in  information  security. During the last 18 years the ISF has spent more than US$100 million providing authoritative material to its Members. The ISF’s work represents the most comprehensive and integrated set of material anywhere in the world in the area of information risk management. The Standard of Good Practice is a key deliverable from the ISF’s extensive work programme.

It has been developed and enhanced over a number of years and has benefi  ted from the results of the many projects run by the ISF As the ISF is a membership organisation, ISF reports are normally for the exclusive use of ISF Members. However, the ISF has made The Standard of Good Practice available to non-Members with the objectives.

DOWNLOAD HERE