I'll outline what I think are the largest measures, and I'll expand a bit on those examples.
The first one, as I mentioned in my opening remarks, is about trying to have a central, independent and specialized procurement function within the department. Prior to the findings of this audit, we had it relatively decentralized, so it did allow some inconsistencies. The advantage of having it centralized and independent is that, at the end of the day, you have a challenge function for those who are looking to procure.
The second thing, as I've mentioned already, is the quality assurance activities. Prior to any contract being signed in the department, long list of things have to be checked off, including the documentation that has to be provided. That is for 100% of the contracts that get signed. I can give examples of things that have to be checked off: Are there security checks for the people doing the contract? Is there a conflict of interest? Is the statement of work clear?
The last thing is a tiered governance structure to ensure that at the end of the day, you have the right larger view, depending on the complexity and size of the contracts.
Just to go back to the previous questions about sole-sourcing, we have an oversight committee. All sole-source procurements have to go through that committee to make sure they meet the test. The thresholds are higher than zero when it comes to competitive processes.