Ack. Sadly, enterprise procurement is all about avoiding blame in case something goes wrong. Another issue is contributing to open source projects. I know a case where a customer's in house developer had to wait two months to contribute a few lines patch to a open source project because legal objected. They never dealt with that situation before.