Comment by matthewcford

Once you've done gov procurement, you can easily see why things like this cost this much. This is nothing.

I've heard of large SIs charging millions for discovery work, only for the report to say the budget is not enough to build the project.

Never mind the standards orgs tendering needs to meet (ISO 27001, Cyber Essentials Plus). It's not for the faint-hearted.