Long time ago
But when I was doing bid work the advice was that if you weren't involved in writing the requirements it was usually a waste of time bidding.
I assume many sales people from many suppliers were shoulder bumping to get their USP included.
Kudos to whoever swung the "of course, you will need the highest level of accreditation" knowing that they were the only ones who could meet it.
Hard to counter with "it doesn't really need to be that secure" - not a positive message.