M1.3.4 - CONTACT WITH SPECIAL INTEREST GROUPS Implementation Guidance

The entity shall maintain, as far as possible, appropriate contacts with relevant special interest groups.

Membership in special interest groups or forums should be considered as a means to:

A. Improve knowledge about best practices and staying up to date with relevant security information
B. Ensure the understanding of the information security environment is current and complete
C. Receive early warnings of alerts, advisories, and patches pertaining to attacks and vulnerabilities
D. Gain access to specialist information security advice
E. Share and exchange information about new technologies, products, threats, or vulnerabilities
F. Provide suitable liaison points when dealing with information security incidents