The Information Security Forum (ISF) is an independent, not-for-profit organization established in 1989, based in London, UK. It comprises a membership of leading corporations, including many from the Fortune 500 and Forbes 2000, as well as public-sector bodies and government departments. ISF's mission is to address critical issues in information security and risk management by developing best practice methodologies and solutions tailored to its members' needs.

ISF provides a range of services, including extensive research and frameworks like the Standard of Good Practice (SOGP), which covers cyber resilience and information risk management. The organization also offers bespoke consultancy services, training, and implementation support to help businesses integrate cybersecurity into their operations. Members benefit from a confidential peer community and events such as the annual ISF World Congress, which fosters knowledge exchange and best practice sharing. Through its tools and methodologies, ISF equips members to effectively manage risks and demonstrate compliance in an evolving cybersecurity landscape.