Contact with authorities and special interest

group Policy

Document ID ACPL-ISMS-C5.5&5.6
Document Classification Internal
Issue Date (effective from) 01.12.2023
Version No 1.0
Latest Review Date 01.12.2023

Nitin Gupta Kunal Parikh Vijay Gupta

CISO Director Director

Prepared By Reviewed By Approved By

Contact with authorities and special interest group Policy

1. Control statement

The organization should establish and maintain contact with relevant authorities and special interest
group or other specialist security forums and professional associations.

2. Purpose

To ensure appropriate flow of information takes place with respect to information security between
the organization and relevant legal, regulatory and supervisory authorities.

3. Scope

This document sets forth the policy of the organization with regard to the information security contact
with legal, regulatory, supervisory, experts in the field of information security and any agency who
support the organization for the purpose of business continuity.

4. Procedure

The organization has specified when and by whom authorities

(1) Law enforcement:

(2) regulatory bodies,
(3) supervisory authorities
(4) utilities,
(5) emergency services,
(6) electricity suppliers
(7) Health and safety
(8) Telecommunication providers
(9) Water suppliers etc.

The way how identified information security incidents are reported to the authorities in a timely
manner.

The authorities are also facilitating about the current and upcoming understanding expectations of
these authorities e.g. applicable information security regulations etc.

In terms of the communication with special interest groups are as follows:

Doc ID: ACPL-ISMS-C5.5&5.6 Version 1.0 Last Rev. Date: 01.12.2023 Page 2 of 3
This document is confidential and must not be shared or copied without written permission from
Aethereus Consulting. Please return or destroy upon request.
Contact with authorities and special interest group Policy

a) The experts in the areas of information security provides enhanced knowledge about best practices
and stay up to date with relevant security information;

b) Ensure the understanding of the information security environment is current;

c) Receive early warnings of alerts, advisories and patches pertaining to attacks and vulnerabilities;

d) Gain access to specialist information security advice;

e) Share and exchange information about new technologies, products, services, threats or
vulnerabilities;

f) Provide suitable liaison points when dealing with information security incidents

5. Revision History

Revision Date Description Author

1.0 01.12.2023 Initial release CISO

Doc ID: ACPL-ISMS-C5.5&5.6 Version 1.0 Last Rev. Date: 01.12.2023 Page 3 of 3
This document is confidential and must not be shared or copied without written permission from
Aethereus Consulting. Please return or destroy upon request.