How to manage regulator enquiries with control — treat the enquiry as an incident, set clear ownership, evidence standards and cross-border coordination.