OPTION A
The large consultancy
Two partners scope the work, then a pyramid of junior staff learns your domain on your budget. You get a strategy document, a proof of concept that will not survive contact with your security team, and a proposal for phase two.