Policies & Standards
The written rules that underpin HKISG public information and programme delivery — inspectable, dated, and enforced independently of membership revenue.
Rules you can inspect
Trust programmes fail when standards live only in email threads. HKISG publishes its policies so buyers, members, and assessors share the same expectations — and so corrections, conflicts, and limitations remain visible over time.
Publication without policy is marketing. Policy without publication is theatre.Editorial Council principle
Editorial standards
Security news and advisories must identify the primary source, author or editor, publication date, and update history. Analysis is labelled as analysis. Sponsored or member-contributed content is disclosed at the point of publication. Corrections are dated and retained — readers can see what changed and when.
Conflict of interest
Board, panel, and editorial participants declare financial, advisory, employment, and family relationships relevant to each programme decision. Conflicted participants are excluded from related votes, scoring, and publication approval. Declarations are reviewed before each assessment cycle and awards panel.
Trust Reviews and awards publication
Public pages include only consented information. They show assessment scope, score, star band, review date, and expiry. HKISG may remove or revise a page where information becomes materially inaccurate, consent is withdrawn, or the rating expires. Post-publication factual corrections create transparent revision notes — they do not silently upgrade scores.
Directory listings
A member directory profile is a factual introduction, not an endorsement. Service categories, contact details, and scope notes must remain accurate. A link to a member's official website is contextual to the profile and may be provided after rating criteria are met; it is not sold as a search-engine ranking outcome or exclusive referral guarantee.
Privacy and data handling
Contact, programme, and learning data is collected only for the purpose stated at collection. Published case studies require written consent. Assessments do not expose sensitive findings without the assessed organisation's explicit permission. HKISG aligns handling practices with Hong Kong privacy expectations; operators remain responsible for their own PDPO obligations.
Cookies and similar technologies
On first visit, HKISG asks for cookie consent. Essential storage remembers your consent choice and basic site preferences so pages work as expected.Analytics (only if you choose Accept all) helps us understand which public pages are useful — for example Trust Reviews, bulletins, and education materials. We do not sell cookie data. You can change your choice anytime via Cookie settings in the site footer.
EEAT and accountability
HKISG demonstrates experience through practitioner-authored bulletins and research; expertise through published methodology and assessor rotation; authoritativeness through independent governance; and trustworthiness through visible corrections, appeals, and separation of fees from outcomes. ReadAbout HKISG and Committee for programme leadership context.
Frequently asked questions
- Who enforces these policies?
- The Editorial Council governs publications; the Programme Council governs ratings and awards; the Board oversees accountability. Conflicts are managed under Governance & Integrity.
- How do I report a factual error?
- Use the contact form with the page URL, the incorrect statement, and supporting evidence. Substantive corrections are dated and retained — original text is not silently overwritten.
- Can members request removal of a rating page?
- Ratings may be removed when consent is withdrawn, information becomes materially inaccurate, or the score expires. Appeals follow the process in Governance. Membership fees do not guarantee permanent publication.
- Do these policies apply to demonstration content?
- Yes. Even demonstration ratings, awards, and committee profiles follow the same publication rules so visitors can evaluate how live programmes will behave.