Open Information Systems Security Group (OISSG) is a not-for-profit organization head quartered in London. Our vision is to spread information security awareness by hosting an environment where security enthusiasts from all over the globe share and build knowledge. It was established with the objective of evolving a set of open standards,guidelines and good practices in the area of information security. As a first step in this direction, a comprehensive framework for the assessment of information systems security has been released. The Framework is known as ISSAF, which can be downloaded from www.oissg.org/issaf.