Controls A.6.1.3 and A.6.1.4

1. How can the Organization be compliant with these Controls?

A.6.1.3:  Contact with Authorities:      Does it mean contact with the Superior Authority who is also the supreme body for GDPR?

In case your organization has to answer to this authority, then this is one way to fulfill this control. Other examples are law enforcement agencies and emergency services.

2. A.6.1.4:  Contact with Special Interest Groups:  Does having ISACA Memberships of some other Interest Groups are taken into consideration?

In case these groups can help you support your ISMS you can consider them to fulfill this control.

This article will provide you a further explanation about interested groups:

• Special interest groups: A useful resource to support your ISMS https://advisera.com/27001academy/blog/2015/04/06/special-interest-groups-a-useful-resource-to-support-your-isms/