E10. Regulator Contact Register Per-jurisdiction register of authority contacts for incident notification and inspection. Lists for each deployment member state: the AI Act market surveillance authority, the NIS2 competent authority or CSIRT, the DORA competent financial authority (where applicable), and the ENISA reporting portal for CRA notifications. Includes contact details, preferred communication channels, reporting portals, and language requirements. Tested during incident response exercises to confirm details are current. Responsible party: AI Governance Lead maintains. Regulations addressed: Article 73 (serious incident reporting); NIS2 Article 23 (incident notification); DORA Article 19 (incident reporting); CRA Article 14 (vulnerability reporting). Key outputs

• Per-jurisdiction authority contact sheet
• Annual verification and exercise records