Clearly, one of the problems was that documentation was not done and those records don't exist, and that's why the AG has a lot of difficulty even determining how much this application cost at the end of the day. It's her best guess, because of the poor record-keeping.
While the Treasury Board has measures in place for procurement, it's clear they weren't followed. What is being done to ensure compliance at the CBSA, for example, and across the government more broadly?