Security

Security is cheapest to negotiate before signature and most expensive to discover afterwards. The clauses that actually matter.

Most of the effort is not the controls. It is proving the management system runs — and that is where certification projects quietly go wrong.

One is a tool run on a schedule. The other is a person trying to break in. Buyers are routinely sold the first while paying for the second.