think of it as each country being its own company, contracting out to a local software house which may have different ideas of what security means