Per ISO/IEC 27002:2022 | 5.5 - Contact with Authorities, organizations “...should specify when and by whom authorities (e.g., law enforcement, regulatory bodies, supervisory authorities) should be contacted and how identified information security incidents should be reported in a timely manner.” A good rule-of-thumb is to have a documented policy that lists the relevant authorities, their contact information, and what necessary actions to take with each respective authority.
Organizations should list local authorities, then state and federal authorities and relevant agencies also: Emergencies do happen, and when they do, you want to be confident you have the right information at the right time in terms of contacting authorities.What organizations need to have in place is a well-defined policy for ISO/IEC 27002:20222 | 5.5 - Contact with Authorities, which is available for download, along with more than 100 + ISMS policies, procedures, programs, and plans - all from MorganHill.
Begin your ISO/IEC 27001 journey today with our industry leading ISMS 27001 Scoping & Gap Assessment Workbook. Our comprehensive, in-depth ISMS 27001 Scoping & Gap Assessment Workbook will help organizations clearly define the scope of their Information Security Management System (ISMS) as required by ISO/IEC 27001.
Also, we offer industry leading security documentation for helping organizations develop all required Information Security Management System (ISMS) policies, procedures, programs, and plans in accordance with ISO/IEC 27001 & 27002.
Additional documentation offered includes a wide range of ISO specific InfoSec, cybersecurity and data privacy documents, along with an industry leading Risk Assessment Program, Statement of Applicability Workbook, Internal Audit Program, Continuous Monitoring Program, and so much more.
WORLD CLASS ISMS SECURITY DOCUMENTS
Get Access to dozens of ISMS templates to accelerate your ISO/IEC 27001 journey.
More Posts
Health Technology Case Study
Four months after completing all necessary pre-certification work, the organization obtained ISO/IEC 27001 certification from an accredited ISO ANAB body that we recommend to them.
Cybersecurity Case Study
Obtained ISO 27001 certification from an accredited ISO ANAB body that I recommend to them.
Manufacturing Case Study
Four months after completing all necessary pre-certification work, the organization obtained ISO 27001 certification from an accredited ISO ANAB body that we recommend to them.
Healthcare Case Study
Three months after completing all necessary pre-certification work, the organization obtained ISO/IEC 27001 certification from an accredited ISO ANAB body that we recommend to them.
