About
Editorial standards
How Infosec Desk reports, sources, reviews and updates field guides, explainers and briefings.
Sourcing
We link to primary sources (regulations, standards, regulator statements, court filings, official data) wherever they exist, and say so when we rely on secondary reporting. Every field guide, explainer and dispatch lists its sources in a numbered list.
No invented numbers, quotes or people
We don’t publish statistics we can’t source, quotes we didn’t gather, or composite “practitioners”. Where a figure or quote can’t be sourced, we leave it out rather than guess.
Review
Field guides and technical explainers are checked against their primary sources before publication, and re-checked when those sources change.
Suggested owners and effort
The “who owns this” charts in our field guides are suggestions, labeled as such. We publish effort estimates only when we can source them.
Updates
When facts change, we update the page, change its “updated” date and add a line to its changelog. We don’t change dates without changing content.
Independence
Commercial partners and the companies we cover never review, approve or edit editorial content.