Back to all 93 controls
    Annex A 5.5
    Organizational

    A.5.5 Contact with authorities

    Maintain contact with relevant authorities.

    What good looks like

    Documented list of authorities (regulators, law enforcement, data protection) with contact procedures.

    Evidence an auditor will ask for

    Contact list, escalation procedure, evidence of past contact.

    Put this control into practice

    Check whether your organisation already meets Annex A 5.5 with the free Gap Analysis tool, or get implementation-ready templates for every Annex A control with the Document Pack.