Organization of Information Security ◾ 11
that the organization must adhere to. ese contacts may be with higher headquar-
ters, legislative affairs organizations, industry groups, and government-wide forums.
Additionally, the organization should maintain contacts with other types of authori-
ties related to the security of its information, which may include utilities companies,
emergency service organizations, fire departments, telecommunication providers, and
emergency health and safety personnel.
Contact with Special Interest Groups
e information security organization should identify needs for both internal and
external specialized information security advice and information. e organiza-
tion should have a process for assuring the value a