Smart cities

A vendor supplies connected street infrastructure, but the contract does not say who installs security updates after deployment. What is the most important procurement improvement?