Tools - Information Security Forum

tool

ISF Indicative Mapping between NIST Cybersecurity Framework 2.0 and 1.1

Gain clarity on the latest NIST Cybersecurity Framework (NIST CSF) updates with ISF's comprehensive mapping document.

tool

Supplier Security Suite

Rise to the supplier risk challenge with a risk-based approach to your end-to-end supplier management lifecycle.

tool

Information Risk Assessment Methodology 2 (IRAM2)

A simple, practical, yet rigorous approach to risk assessments, enabling organisations to speak a common language with key stakeholders.

tool

The Benchmark

Benchmark against peers to identify core areas of security that require attention and maximise return on investment.

tool

Standard of Good Practice for Information Security

An internationally recognised set of good practice covering all aspects of cyber resilience, cloud security and information risk management.

tool

ISF Aligned Tools Suite

Strategic information risk management tools to assess risk, qualify supplier security and assure prioritised cyber security investment.

tool

Managing Information Risk the ISF Way

The ISF Managing Information Risk the ISF Way Executive Summary provides an easy to read illustrative overview of the ISF’s most powerful and popular tools.

tool

The ISF Standard of Good Practice Online Informative References to NIST CSF

The ISF has been working with the United State's National Institute of Standards and Technology…

tool

Quantitative Techniques in Information Risk Analysis

Quantitative techniques in information risk analysis are swiftly emerging as a method to deliver value through accurately measuring an organisation’s exposure to loss.

tool

The ISF Maturity Model Accelerator Tool

This accelerator tool contains the ISF Maturity Model. It enables users to measure their maturity…

tool

Supply Chain Assurance Framework (SCAF)

The Supply Chain Assurance Framework provides a structured approach to help organisations’ information security functions to embed information security considerations into the contracting process.

tool

Supplier Security Evaluation (SSE)

The SSE Accelerator Tool provides an easy-to-use, spreadsheet based method to assess the information security status of an individual supplier or a group of suppliers.