Reports identifying potential risks can also come to us from grassroots civil society organizations, local news outlets, individuals in the supply chain or supply chain communities, local whistleblower mechanisms, and third-party hotlines.