All Research, Frameworks & Tools

For more than three decades, the ISF has equipped its Members with the research, tools, and guidance necessary to operate securely at the pace of business.

Array

Built on the industry's most resilient foundation

Everything ISF produces traces back to the Standard of Good Practice (SOGP).

SOGP is the leading authority on information security, continuously updated by ISF’s research programme, shaped by direct Member input, and aligned to new legislation and standards as the threat landscape shifts. It’s what keeps our guidance current, consistent, and grounded in what Members are actually facing.

Explore SOGP

Community Insights

Practical, implementable research built on global collaboration and real world experience.

Your strategic guide to an uncertain future

Threat Horizon

Threat Horizon has given security and business leaders a two-year outlook on emerging cyber risks for over 19 years to help them anticipate what’s ahead – from geopolitical shifts to technological disruption – and build resilience before threats materialise.
Download our latest Executive View

Trending research

View all research
Array
research

AI Insights: AI security governance

Get the framework and actionable steps to master AI Security Governance and drive adoption across your entire organisation.

Read more on AI Insights: AI security governance
Array
research

Protecting The Crown Jewels: How to Secure Your Mission-Critical Information Assets

Identify, assess and protect your mission-critical assets with six recommendations to strengthen resilience and secure what matters most.

Read more on Protecting The Crown Jewels: How to Secure Your Mission-Critical Information Assets
Array
research

Extinction Level Attacks: A survival guide

A detailed, pragmatic approach that aids organisations in being better prepared and ultimately surviving an extinction-level attack

Resource Hub on Extinction Level Attacks: A survival guide

Tools & Applications

Flexible tools tested within the world’s leading organisations to manage risk, benchmark your posture, and evidence it to the board.

Coming soon...

Information Risk Assessment and Management 3 (IRAM3)

IRAM3 brings qualitative and quantitative assessment together into one unified approach for managing information risk. Backed by an independent methodology, it keeps your risk picture current as things change, so you can report a clear and defensible risk position whenever your board, insurers or regulators ask.

All tools

Array
tool

The Benchmark

Benchmark against peers and global standards to identify core areas of security that require attention and maximise ROI.

Read more on The Benchmark
Array
tool

Supplier Security

Rise to the supplier risk challenge with a risk-based approach to your end-to-end supplier management lifecycle.

Read more on Supplier Security
Array
tool

Information Risk Assessment Methodology 2 (IRAM2)

A simple, practical, yet rigorous approach to risk assessments, enabling organisations to speak a common language with key stakeholders.

Read more on Information Risk Assessment Methodology 2 (IRAM2)

One Membership. Every resource.
Your whole team.

Every report, framework and tool is included in a single ISF Membership, along with the community that built them. Join 470+ of the world’s leading organisations in tackling cyber challenges together.

Enquire about Membership