All Research, Frameworks & Tools

For more than three decades, the ISF has equipped its Members with the research, tools, and guidance necessary to operate securely at the pace of business.

Array

Built on the industry's most resilient foundation

Everything ISF produces traces back to the Standard of Good Practice (SOGP).

SOGP is the leading authority on information security, continuously updated by ISF’s research programme, shaped by direct Member input, and aligned to new legislation and standards as the threat landscape shifts. It’s what keeps our guidance current, consistent, and grounded in what Members are actually facing.

Explore SOGP

Community Insights

Practical, implementable research built on global collaboration and real world experience.

Your strategic guide to an uncertain future

Threat Horizon

Threat Horizon has given security and business leaders a two-year outlook on emerging cyber risks for over 19 years to help them anticipate what’s ahead – from geopolitical shifts to technological disruption – and build resilience before threats materialise.
Download our latest Executive View

Trending research

View all research
Array
research

AI Insights: AI security governance

Get the framework and actionable steps to master AI Security Governance and drive adoption across your entire organisation.

Read more on AI Insights: AI security governance
Array
research

Protecting The Crown Jewels: How to Secure Your Mission-Critical Information Assets

Identify, assess and protect your mission-critical assets with six recommendations to strengthen resilience and secure what matters most.

Read more on Protecting The Crown Jewels: How to Secure Your Mission-Critical Information Assets
Array
research

Extinction Level Attacks: A survival guide

A detailed, pragmatic approach that aids organisations in being better prepared and ultimately surviving an extinction-level attack

Resource Hub on Extinction Level Attacks: A survival guide

Tools & Applications

Flexible tools tested within the world’s leading organisations to assess risk, benchmark your posture, and evidence it to the board.

Every ISF tool, all in one place

ISF Assure

Whether you’re assessing and managing risk, testing internal controls, or vetting external partners, ISF Assure brings it together under one roof. Combined with SOGP, it’s how Members turn insights into a concrete security improvement plan, and see around corners before vulnerabilities become incidents.
Learn more about Assure
Array
tool

The Benchmark

Benchmark against peers and global standards to identify core areas of security that require attention and maximise ROI.

Read more on The Benchmark
Array
tool

Supplier Security

Rise to the supplier risk challenge with a risk-based approach to your end-to-end supplier management lifecycle.

Read more on Supplier Security
Array
tool

Information Risk Assessment Methodology 2 (IRAM2)

A simple, practical, yet rigorous approach to risk assessments, enabling organisations to speak a common language with key stakeholders.

Read more on Information Risk Assessment Methodology 2 (IRAM2)

One Membership. Every resource.
Your whole team.

Every report, framework and tool is included in a single ISF Membership, along with the community that built them. Join 475+ of the world’s leading organisations in tackling cyber challenges together.

Enquire about Membership