Requirement
"The organization shall establish and maintain contact with special interest groups or other specialist security forums and professional associations."[1]
Explanation
To improve the organizations awareness of the latest cybersecurity trends personnel with security and system administration responsibilities should subscribe to security relevant mailing lists and occasionally attend cybersecurity industry events.