The ISF has developed a number of information security standards that organizations can use to guide their security programs. These standards cover a wide range of topics, from risk management to insider threat prevention, and are based on the collective experience and expertise of the ISF's members.
Some of the most popular ISF standards include:
The Standard of Good Practice for Information Security (SOGP)
The Threat Horizon series, which identifies and assesses emerging cyber threats and provides guidance on how to prepare for them.
The Information Risk Assessment Methodology (IRAM)
The Supply Chain Information Risk Assurance Process (SCIRAP)