YASS (Yet Another Security Standard)

As someone who earns at least part of his living writing about security best practise, I am all in favour of anything that can help companies get it right in the face of increasingly complex legislative and corporate governance requirements. I am also all too well aware that it can be something of a deep pockets minefield with organisations charging an arm, leg and three quarters of your bottom just to get your hands on their 'standard' documentation. Which is why I was pleased to see that the ISF has made its Standard of Good Practise documentation freely available for download.