Before revision: US governmental institution NIST's Computer Security Resource Center (CSRC) has published a Special Publication (SP) named SP 800-34 guiding organizations as to how an ISCP should be developed.
After revision: The US National Institute of Standards and Technology Computer Security Resource Center (CSRC) has published a Special Publication (SP) named SP 800-34 guiding organizations as to how an ISCP should be developed.