Solutions and Insights
Tackle your security challenges with our trusted solutions and valued insights.
Research
ISF: Your first line of defence in safeguarding your organisation
A resource centre with digital and downloadable resources dedicated to supporting your organisation in its journey to become resilient by design.
Read more
Department Finance Benchmark 2024
Make informed decisions and drive cost-effectiveness with powerful C-suite department benchmarking data from 200 global organisations.
Read more
Leadership Insights: Unlocking the business value of security
Explore the historic business perceptions holding back security, and discover steps security leaders can take to accelerate positive change.
Read moreTools
ISF Indicative Mapping between NIST Cybersecurity Framework 2.0 and 1.1
Gain clarity on the latest NIST Cybersecurity Framework (NIST CSF) updates with ISF's comprehensive mapping document.
Read more
Standard of Good Practice for Information Security
A comprehensive, internationally-recognised security framework that guides organisations to better cyber security.
Read more
ISF Aligned Tools Suite
Strategic information risk management tools to assess risk, qualify supplier security and assure prioritised cyber security investment.
Read moreServices
Strategic Threat Analysis
Review and sharpen your cyber security roadmap and create a board-ready outcome to present your strategy to senior stakeholders.
GET IN TOUCH
Threat Horizon Workshop
A workshop-based engagement to challenge your organisation’s readiness to manage potential threat scenarios.
GET IN TOUCH
Controls, Policies and Standards Support
Develop, validate and improve your security controls and policies to create standards that staff across the business can easily follow.
GET IN TOUCHPodcasts
Retaining Control: Empowering Innovation Without Losing Sight of Risk
Explore how ethical AI, governance, and leadership can drive innovation without losing control in today’s fast-changing tech landscape.
Preserving Humanity in the Age of AI
Explore how business leaders can preserve human values, the synergy between AI and humans, and the importance of maintaining human oversight over AI.
Christopher Sestito - Stay Ahead or Fall Behind: The AI Challenge for Modern Businesses
Explore Christopher Sestito's insights on AI's industry impact, regulatory hurdles, and essential strategies for business leaders.
Events
Upcoming Events
9th CISO 360 Global Congress 2025
Join CISOs from around the world as they share strategies, explore emerging trends, and benchmark the latest cybersecurity tactics and tools.
Is ensuring your people are cyber-resilient the ethical responsibility of the organisation?
In this session, Javvad Malik, Lead Security Awareness Advocate at KnowBe4 will examine the ethical responsibility of organisations to ensure their employees are cyber resilient.
ISF World Congress, Prague 2025
Collaborate, innovate, and shape the future of security at ISF World Congress: the global event for leaders in cyber security and risk management.
On-Demand Events
UK Conference 2025
Join the UK Conference 2025 to connect with regional security professionals, exchange information and security solutions.
Supply Chain Cyber Simulation Exercise - Zurich
Join an exclusive group of ISF Members and non-Members for a Supply Chain Cyber Simulation Exercise, in Zurich, Switzerland.
SOGP: the right unifying compliance framework for your organisation
Discover how integrating diverse standards can enhance security controls and ensure comprehensive protection across global operations.
Videos
ISF Interview: Steve Durbin talks cyber resilience and business continuity
ISF Chief Executive Steve Durbin offers his perspective on the global landscape and prepares organisations for the challenges ahead.
Watch now
CISOs, Warfare and Technology in the Spotlight
Journalist Nicholas Witchell puts Steve Durbin in the 'cyber hot-seat' for fifteen minutes of timely rapid-fire questions.
Watch nowNews
Understanding The Weaponization Of Agentic AI
Steve Durbin unpacks how agentic AI's autonomous capabilities are being exploited by cybercriminals, posing new threats to cybersecurity and reshaping digital risk landscapes.
Agentic AI Can Be Force Multiplier — for Criminals, Too
Steve Durbin reveals how malicious actors are developing teams of autonomous AI systems that can evade traditional security measures through techniques like polymorphic code generation and data poisoning.
Understanding the EU's Digital Operational Resilience Act
Steve Durbin explores the EU's Digital Operational Resilience Act (DORA), highlighting its significance for financial services.