You are the CISO of a medium sized organization and you need to implement a security solution that will protect your workstations throughout the organization. You will need to procure the software solution, the services to install it, the services to maintain it and training for your staff.

What contract type would you use for this effort? Why did you choose this contract type? Who has the most risk in this contract?