(2)The control framework established by a supervised contributor should include a procedure for detecting and managing breaches of Regulation (EU) 2016/1011 and breaches of the applicable code of conduct, and policies on whistle-blowing, oversight and periodic review of the process for contributing input data. This is so that supervised contributors can ensure that they are acting lawfully and submitting input data that is accurate and reliable.