What if the information comes outside a system they control or organization they have no prior experience with?