Okay I understand what your getting at.
If cipher updates are required or the system starts failing and you don't have control to be functionally independent of that you've failed at the quite basic procurement level.
Again if your procuring military equipment and allowing information to be classified from yourself you're failing at the procurement.
Have you never worked on an MoD job before?
Failure at procurement appears to be de rigueur!!