but why
does the business link website need all that? Will the world grind to a halt if it's down for a day? Does it hold the keys to the governments actual sensitive data, or could you get by with something of high security but not insanely high?
Why do you need procurement when any decent IT guy knows you could get it developed by a couple of inhouse devs no problem, call it half a dozen in the team if you wanjt to get crazy about it. It's not a ridiculously complex website. And because the guys would be inhouse, you wouldn't have to pay through the nose for every bloody change request.