ISO 27002:2022 5.6: Contact with special interest groups
The organization is to join and stay in touch with special interest groups, specialist security communities and professional bodies. Purpose: keep useful information security knowledge flowing into and out of the organization. Guidance: membership of such groups or forums is worth considering as a way to learn good practice and stay informed; keep the organization's picture of the security environment current; get early notice of alerts, advisories and patches about attacks and vulnerabilities; reach specialist security advice; trade information on new technologies, products, services, threats and vulnerabilities; and have ready liaison points when handling security incidents (5.24 to 5.28).
This control maps to 27 controls across 26 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
NIST-CSF-GV.RM-05 Lines of communication across the organization are established for cybersecurity risks, including risks from suppliers and other third parties
NIST-CSF-ID.RA-02 Cyber threat intelligence is received from information sharing forums and sources
You are reading one control. How much of ISO 27002:2022 have you already done?
ISO 27002:2022 5.6 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of ISO 27002:2022 your existing evidence covers. Hold NIST SP 800-53 Rev 5 and 79 of 93 ISO 27002:2022 controls already carry evidence.
Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 180 were rejected on the NIST SP 800-53 Rev 5 pair alone.