What the hell was he talking about, patch the vulnerability.  If that was what they were going to do, better to stay away.  Once the compromise happens, the servers should be offline and a post-mortem should be conducted.  You would never bring the compromised systems back online.  You would replace them with new systems with validated backup restores.  I've worked cyber in and out of federal gov't and bringing DHS in for help would not add any value to what a quality security team would bring, but would add more overhead.