Solutions and Insights
Tackle your security challenges with our trusted solutions and valued insights.
Research
Cyber Awareness: Kickstart your security culture
Trusted insights in an easy-to-share format designed to accelerate CISOs and their team's ability to build a resilient security culture.
Download nowISF: Your first line of defence in safeguarding your organisation
A resource centre with digital and downloadable resources dedicated to supporting your organisation in its journey to become resilient by design.
Read moreISF: Your first line of defence in supplier security risk management
A lot of organisations have outsourced to a third party and so they feel as…
Read moreTools
ISF Indicative Mapping between NIST Cybersecurity Framework 2.0 and 1.1
Gain clarity on the latest NIST Cybersecurity Framework (NIST CSF) updates with ISF's comprehensive mapping document.
Read moreSupplier Security Suite
Rise to the supplier risk challenge with a risk-based approach to your end-to-end supplier management lifecycle.
Read moreInformation Risk Assessment Methodology 2 (IRAM2)
A simple, practical, yet rigorous approach to risk assessments, enabling organisations to speak a common language with key stakeholders.
Read moreGain unlimited access to our comprehensive research, reports, and tools
Become a Member todayServices
ISF Services Overview
Read moreHuman-Centred Security Assessment
Determine the reasons behind poor security behaviour and engage your workforce to better protect your organisation with expert ISF support.
GET IN TOUCHStrategic Threat Analysis
Review and sharpen your cyber security roadmap and create a board-ready outcome to present your strategy to senior stakeholders.
GET IN TOUCHPodcasts
Unity Amid the Chaos: Finding common ground in a de-stabilised society
Steve Durbin explores how technology; social media are shaping new forms of division defined by personal identities, interests, and beliefs.
Laying Down the Law on AI
Policy experts and AI wranglers take a look at the ever-growing roster of AI regulations in order to find ways for organisations to cope.
The AI-Quantum Revolution: Today, tomorrow and the future
Steve Durbin discusses the impact of quantum computing on cybersecurity and the need for enterprises to prioritise legacy technology updates.
Events
Cyber Security Showcase Webinar Week 2024
A series of thought-provoking webinars addressing current security challenges with new and unique insight.
ISF Tools: A holistic approach to security
Hear directly from Alex Jordan, Head of Tools & Methodologies, and Francesca Williamson, ISF Analyst, about the recently updated ISF Tools Suite that is aligned to the 2024 version of the ISF Standard of Good Practice (SOGP)
Building with Confidence: Security from Code to Cloud
This session explores how a code-to-cloud approach can empower developers to move at the speed of the cloud without compromising security
Videos
ISF Interview: Steve Durbin talks cyber resilience and business continuity
ISF Chief Executive Steve Durbin offers his perspective on the global landscape and prepares organisations for the challenges ahead.
Watch nowTakeaways From the Security Middle East Conference 2023
Daniel Norman highlights his key takeaways from the Security Middle East Conference; exploring what the future holds for cyber in the region.
Watch nowBenchmark in Bitesize
Gain a comprehensive view of how ISF can support you in reviewing performance against your industry peers and industry frameworks.
Watch nowNews
Who are BISOs and what do they bring to the cybersecurity table?
Steve Durbin, ISF Chief Executive shares his thoughts on why organisations need a BISO and what traits are ideally suited for the role.
The Impact of Technology Failures on Business Resilience
Steve Durbin, ISF CEO shares 5 important factors to consider when trying to mitigate and counterbalance business impact of technology failures
Strategies for Security Leaders: Building a positive cybersecurity culture
ISF CEO Steve Durbin shares his best practices on how security leaders can develop a positive brand and culture for cyber security.