ISO 27001 5.5 Contact With Authorities

Requirement

"The organization shall establish and maintain contact with relevant authorities."[1]

Explanation

Depending on the organization's compliance requirements it may be required to maintain contact with relevant authorities. An example is an organization with HIPPA requirements must have a mechanism to report EPHI compromises.

References

ISO/IEC 27001

Need help putting this into practice? See our ISO 27001 compliance services or read our ISO 27001 articles.

See LakeRidge in action.

Talk with our team about your framework, your gaps, and the right plan.

Get a demo