An initiative that uses advisory services from external specialists, such as audit firms, to strengthen information security management. It focuses on commissioning and using external advice rather than on developing the company's own management framework itself.