Solutions and Insights
Tackle your security challenges with our trusted solutions and valued insights.
Research
Threat Horizon 2024: The disintegration of trust
Should organisations attempt to rebuild trust, or accept that it has disintegrated and adapt accordingly?
Read more
Rehearsing Your Cyber Incident Response Capability
Six Proactive Steps Towards Stabilisation
Read more
Managing Cyber Threats During Periods of Instability
Seven Proactive Steps Towards Stabilisation
Read moreTools
Standard of Good Practice for Information Security 2020
The goal of every information security professional is to enable the organisation to conduct its…
Read more
Supply Chain Assurance Framework (SCAF)
The Supply Chain Assurance Framework provides a structured approach to help organisations’ information security functions to embed information security considerations into the contracting process.
Read more
Supplier Security Evaluation (SSE)
The SSE Accelerator Tool provides an easy-to-use, spreadsheet based method to assess the information security status of an individual supplier or a group of suppliers.
Read moreServices
Threat Horizon Planning Exercise
The Threat Horizon Planning Exercise provides an actionable, tailored plan to help business leaders and…
Find out more
Request an ISF Zero Trust Readiness Assessment
An independent, actionable assessment of your organisation's readiness for implementing zero trust - in just 10 days.
Learn more
ISF Rapid Security Assessment
The Rapid Security Assessment (RSA) provides a high impact, peer-validated Information Security Management System (ISMS)…
Find out morePodcasts
Cyber, CISO and the Board: Security means business
Steve Durbin explores the five business priorities CISOs must be considering to ensure resilience through 2022 and beyond.
Managing Cyber Threats During Times of Instability
Steve Durbin considers the key takeaways from Season 10 both in terms of business leadership, as well as the actionable insights.
The Race for Tech Dominance
The second of two episodes around ISF Chief Executive Steve Durbin's research on: 'The New World Order and the Race for Tech Dominance'.
Events
Upcoming Events
Cyber Security Exercise - Manchester
Test and prove your ability to respond to a high-impact ransomware attack on your business at our next Cyber Security Exercise in Manchester.
Cyber Security Exercise - Canada
Test and prove your ability to respond to a high-impact ransomware attack on your business at our next Cyber Security Exercise in Toronto.
On Demand Events
Preparing for a Cyber Crisis: The ISF approach
An ISF webinar detailing how you can design realistic, impactful cyber attack simulations and playbooks to strengthen your cyber resilience.
Attacks Against Critical Infrastructures are Going Physical - 3 Use Cases
Bernard Montel breaks down three domains that have been particularly affected by attacks on critical infrastructure over the last two years.
Implementing a Zero Trust Strategy: The ISF approach
Catch up on this detailed webinar that explored a vendor-agnostic approach to implementing a Zero Trust Security Strategy.
Videos
Ways to survive the ransomware menace
As enterprise clammers to address the ransomware threat of today, what steps should you be…
Watch Now
ISF Annual Update: Emerging Threats for 2022
On Wednesday 8 December, 15.00 GMT/10.00 EST, Steve Durbin, Chief Executive, ISF held our annual emerging…
Watch Now
Colonial Power - Todays Cybercrime Pandemic and what to do about it
Panelists from the ISF CxO Roundtable - Today's Cybercrime pandemic and what to do about…
Read moreNews
Cyber Insurance: An effective use of your scant security budget?
Paul Watts questions whether cyber insurance is a must-have item, an expensive luxury, or the emperor’s new clothes.
Five Ways to Secure the Supply Chain in Times of Conflict
Steve explains the five steps organisations can take to help mitigate potential threats against the supply chain and be better armed.
Three Unintended Consequences of Well-Intentioned Cyber Regulations
Steve explains how you can prepare against unintended consequences of cyber regulations, no matter how well-intentioned they might be.