The Standard of Good Practice for Information Security (the Standard) has been produced by the Information Security Forum (ISF), an international association of over 300 leading organisations which fund and co-operate in the development of a practical research programme in information security. During the last 18 years the ISF has spent more than US$100 million providing authoritative material …