Consult everybody, assuming that the company's products appear security vulnerabilities, emergency procedures should be how to, including how to notify the customer and the national regulators