
The standard is split into six areas including security management, critical business applications, networks and computer installations.
Each section provides key objectives and an overview of the practical measures to be used to control risk, according to the ISF.
Endpoint protection, wireless access, security architecture, identity management and portable storage devices, are just some of the topics to be covered in the latest version, the association said.
The ISF is an independent organisation that helps businesses address information security and risk management problems.