I think I would start off by a general statement, and then I'll give you a bit more detail, but when so much goes wrong, every layer of management has to take some responsibility for the significant weaknesses that we found, whether it be in procurement, contract management, project management, budget management or record-keeping.
There are many layers of management that need to take responsibility here, but when it comes to who actually decided that GC Strategies was the right vendor, it's a question that we were not able to answer. I can tell you, though, that there was a contract requisition—the document that indicates that a contract should be issued—that was signed by the executive director over at CBSA.
I think every public servant needs to know that when they exercise their delegated responsibility, signing their name to something comes with accountability and responsibility: If you feel that you're being pressured or you're not at ease with signing that document, then you should raise that with your supervisors. There are mechanisms in place. You shouldn't sign something that you're uncomfortable signing, but in this case the executive director signed the contract requisition.