Contact with authorities
A.5.5
-
Last updated
Applicable
Catalog reference
Maintain documented contacts with relevant authorities (law enforcement, regulators, national CERTs) so the organisation can engage them quickly when an incident or legal matter requires it.
Narrative — how we satisfy this requirement
The Incident Coordinator keeps the contact details of the Dutch Data Protection Authority, the national cyber security centre, and the police, and checks the list every year.
None due within 31 days.