Purchasing outside solutions, or employing internal ones without due diligence to security is a common and serious problem, and operations personnel must be diligent and precise in their evaluations to impress upon management the potential serious consequences of a poor investment decision.