ISF Standard of Good Practice 2011 ---- Only available to ISF Members

A STREAM database configured with the Information Security Forum (ISF) Standard of Good Practice 2011 and IRAM Threat / Incident list for use with STREAM Integrated Risk Manager. FREE TO ISF MEMBERS.   Please contact us to request this application.

Key Features:

• Record, measure and report on your current and historical compliance with SoGP 2011
• Report against both the SoGP 2011 Fundamental and Specialised Topics
• Allows mapping of SoGP controls to threats, including the ISF Threat Horizon.  See which SoGP 2011 controls will mitigate new threats and track their performance *
• Perform IRAM - compatible risk assessments and monitor your risk status as threats, potential impacts and control performance changes
• Allows mapping of IRAM risks to SoGP 2011 controls and can calculate risk status in relation to compliance with SoGP 2011 controls *
• Record incidents and near-misses and categorise against the ISF Threat / Incident List
• Export of data for benchmarking.

* Users can easily make their own mappings or upload those provided by ISF.

The ISF SoGP 2011 application is available free of charge to ISF Members on request and can be used on both the free single-user (SU) edition and the paid-for multi-user Enterprise edition of STREAM. 

STREAM can be configured with multiple control standards, threat lists, risk metrics, incident types etc. and modelled to match your business needs.   In addition to SoGP 2011, STREAM is configurable with a wide range of  ISF content, such as the Security Healthcheck, IRAM risk assessment and third party security assessment.  Or you can mix and match with your own in-house content or that from other providers.

For Members wishing to integrate content from multiple sources, we recommend a small number of consultancy days from Acuity to assist with importing and mapping the content and the choice of STREAM settings.

Watch the video below for a demonstration of this product.