Standard of Good Practice for Information Security
The most up-to-date, comprehensive and globally adopted security framework.
Exclusive to ISF Members, the Standard of Good Practice for Information Security (SOGP) presents business-oriented information security topics with practical and trusted guidance. The SOGP helps organisations deliver up-to-date good practice that can be integrated into their business processes, information security programme and policy, risk management and compliance arrangements.
Designed for risk management specialists, information security managers and security practitioners, SOGP helps organisations:
- be agile when exploiting new opportunities whilst managing the associated risk
- respond to rapidly evolving threats, avoiding costly incidents, operational impacts and reputational damage
- identify and meet regulatory and compliance requirements.
SOGP is aligned with a wide variety of external standards and frameworks, including ISO/IEC 27002, NIST Cybersecurity Framework, and the CSA Cloud Control Matrix, enabling organisations to consolidate compliance activities in a single, unified approach.
Deliver resilience
Respond rapidly to mounting threats with a ready-made framework of security controls.
Ensure compliance
Work towards certification of compliance in an efficient, cost-effective manner.
Assess information risk
Deliver comprehensive, consistent protection in line with your organisation’s risk appetite.
Harmonise policies
Greatly reduce the time and effort required to produce information security policies and procedures.
Manage supply chains
Incorporate your supply chain into a risk-based approach to information security.
Raise awareness
Increase the profile of information security across the business.
Already an ISF Member?
If you are already a part of the ISF community, head to ISF Live for access to all the relevant materials required to implement the SOGP, the SOGP WebApp, and a network of over 25,000 information security professionals.
