They need to review their policies and procedures.