The ISF Standard of Good Practice for Information Security (SOGP) is the leading authority on information security. SOGP presents business-orientated information security topics with practical and trusted implementation-level guidance.

The Standard of Good Practice for Information Security (SOGP), published by the Information Security Forum (ISF), is a business-focused, practical and comprehensive guide to identifying and managing information security risks in organizations and their supply chains.

The ISF recently published a major update to the Standard of Good Practice for Information Security 2024 including all the latest topics in information security – Artificial Intelligence, Cyber resilience, Zero Trust and many more.

SOGP 2024 equips organisations and practitioners across the globe with our most comprehensive cyber security best practice guidance to-date. Including a high-level security framework alongside a...

The Information Security Forum (ISF) has developed the comprehensive and authoritative Standard of Good Practice for information security (SOGP), regarded by many international Blue Chip organisations as the most practical source of information security and information risk-related guidance in the world.

Leverage the most recent ISF Standard of Good Practice for Information Security (SOGP) to develop, validate and improve your security controls and policies – creating standards that staff across the business can easily follow. Why work with …

2023年4月24日 · ISF最重要的活动是持续开发信息安全良好实践标准（SOGF，Standard of Good Practice for Information Security）。 这个文档是一个以业务为中心的全面指南，用于识别和管理组织及其供应链中的信息安全风险。

2024年9月21日 · What is the ISF SoGP Framework? The ISF SoGP is a comprehensive set of best practices for managing and securing information assets across different industries. It provides practical...

2025年1月17日 · Want to improve your organization's information security? Learn about the Standard of Good Practice for Information Security (SOGP) with our guide 📙

2020年5月6日 · The Information Security Forum (ISF) has published a major update to its Standard of Good Practice (The Standard) for IT security professionals, the industry’s most business-focused, all-in-one guide to information security assurance, presenting business-orientated information security topics with practical and trusted guidance.