Supplier: We need you to sign off the security of this implementation.
Us/Customer: can we see the architectural diagrams for the systems you built for us?
Supplier: No, that’s our IP.
Us/Customer: Uhhh ok, can you tell us what standards you worked to so we can assure against the design?
Supplier: We didn’t use any standards.
Us/Customer: Then what the fuck do you want from us?