Setting the Right Foundations
Establishing Common Understanding
Last Updated: March 9, 2026Information security is a discipline that spans multiple fields, including computer science, law, risk management, and organisational governance. This breadth is one of its greatest...
Common Information Security Frameworks
Last Updated: March 8, 2026Information security frameworks are comprehensive sets of guidelines, best practices, and standards that provide organisations with a structured approach to implementing, managing, and continuously improving...
Information Security Industry Standards
Last Updated: March 8, 2026Industry-based information security standards are guidelines and best practices developed by specific industries or sectors to address their unique security requirements and challenges. These industry-based...
Threat Informed Risk Management
Last Updated: March 8, 2026Understanding the nature and origin of information security threats, and their relationship to broader organisational risk, is foundational to effective security management. Central to this...
Common Threat Modelling Approaches
Last Updated: September 7, 2026STRIDE A threat categorisation model developed by Microsoft that provides a structured taxonomy for identifying threats to software systems by classifying them across six distinct...