The organization should create and uphold connections with special interest groups or other specialized security forums and professional associations in order to facilitate the proper exchange of information concerning information security. These contacts can provide many benefits for example a good way to stay tuned on the best practices of the industry, offer early warnings of potential threats and grant access to the expertise of professionals that organization may not have in-house.
The organization shall actively maintain contacts with stakeholders relevant to the organization's operations and other relevant actors related to the organization's operations and security.
The goal is especially to: