Insurance Companies are offering 24 hr hotlines helping clients detect events, report events, and help respond and recover. Do these people have an appropriate level of clearance to work with the client? What is appropriate and in what circumstance should they have access to client systems to help. When should they stand down and just ask client to call DoD? This is a critical issue to address immediately.