Skip to main content

Vanta Community Icon

Home
Events
Members

Announcements
GRC
Product Updates
SOC2 Launchpad
Social
Trust Circles

Community Guidelines

Powered by Tightknit

Any UK-based companies could advise how they are complying with GOV-108 (Contact with special interest groups)? Specifi...

·Oct 28, 2026 02:21 PM·

Any UK-based companies could advise how they are complying with GOV-108 (Contact with special interest groups)? Specifically interested in no-cost options. 🙂

5 comments

· Sorted by Oldest

Jacob G.
·
·
i wonder if Ffion Rajiv S. Martin G. Patrick W. Syed Z. Christian D. Danny C., if you have any POV to share with abbie?
Syed Z.
·
·
Unfortunately a bit out of scope for me 😞
2
💜1
Rajiv S.
·
·
For A5.6 I use my ISACA and ISC2 memberships - if anyone on your team already has a CISSP, CISM, etc the membership they keep up for it should cover it, and can use CPE records if your auditor pushes on actual engagement. For free I’d think maybe your local OWASP chapter or BSides and/or any local cyber clusters
1
Martin G.
·
·
I do ISACA membership (which is not free, but it's only £125 per year) for the "Security association membership", and I subscribe to a few security-related newsletters (TLDR Security, CISA, KrebsOnSecurity) for the "Security newsletter / group subscription". This has been deemed sufficient by our ISO 27001 auditor through our initial audit and surveillance audits.
1
Mike G.
·
·
Same here as above, I have an ISACA membership and doing the ISC2 CC, which is their entry-level one but were both sufficient for the ISO 27k1 auditor. Their webinars also provide CPE points that track.
1
1

💜

1

1