Start with the purpose and available identifiers. Registries differ in coverage and machine-readable access.
Distinguish a finding, missing data and technical unavailability. An outage must not automatically count as a passed check.
Record the source, time and result within the agreed scope. Give the responsible person a clear exception and recheck procedure.