5.6 Contact with Special Interest Groups

The organisation should establish and maintain contact with special interest groups, specialist security forums, and professional associations.

For organisations, it is crucial to update their knowledge and stay current continuously. Receiving information regarding new information security alerts, threats, vulnerabilities, and patches is highly recommended. This helps organisations to better defend and intervene to risks addressing their line of business before it is too late.

Subscribing to information security weekly, monthly, or quarterly magazines or newsletters is a great practice. Sources such as SANS Information Security newsletters, Knowbe4, Security Weekly, Infosecurity Magazine, and so forth are great sources to consider.