Mechanisms exist to identify and document appropriate contacts with relevant law enforcement and regulatory bodies.
Does the organization identify and document appropriate contacts with relevant law enforcement and regulatory bodies?