return to Consultancy Services
Policy and Standards Review
Policy and Standards need to be clear, usable and aligned to how people actually work, enabling staff to consistently make the right security decisions.
The ISF Policy and Standards Review provides a focused expert assessment of your existing documentation, highlighting where it supports your security objectives and where refinement is needed to improve clarity, consistency and alignment with recognised good practice. It’s ideal for organisations with existing policies and standards that need rapid, pragmatic insight into how to strengthen them.
Our solution
Through a short, structured review, ISF experts assess how well your policies and standards:
- Support your organisation’s security objectives
- Cover relevant external standards and frameworks
- Are structured, written and formatted for practical use
The focus is on clarity, usability and maintainability, ensuring documents enable secure behaviour, not just compliance.
What you receive
- Document‑level assessments with clear recommendations
- Mapping to the ISF Standard of Good Practice (SOGP) or another major framework
- Identification of missing or under‑represented content
- Thematic observations across the document set
- A recommended target structure to support improvement
One of the best features is that we gain expert, independent insight of our strengths and weaknesses coupled with pragmatic guidance to address critical security weaknesses in our company.ISF Member
Want to find out more?