Tools - Information Security Forum

tool

Information Risk Assessment Methodology 2 (IRAM2)

A simple, practical, yet rigorous approach to risk assessments, enabling organisations to speak a common language with key stakeholders.

Supply Chain Assurance Framework (SCAF)

The Supply Chain Assurance Framework provides a structured approach to help organisations’ information security functions to embed information security considerations into the contracting process.

Supplier Security Evaluation (SSE)

The SSE Accelerator Tool provides an easy-to-use, spreadsheet based method to assess the information security status of an individual supplier or a group of suppliers.