Mechanisms exist to maintain incident response contacts with applicable regulatory and law enforcement agencies.
Does the organization maintain incident response contacts with applicable regulatory and law enforcement agencies?