[Romulus]

The Victorian government saying it doesn't know who was responsible is deceptive. Of course they know.
Someone awarded the contract for payment to the security company.
That requires a signature or authorisation.
That signator has a department head or manager.
Simply follow the chain of command or hierarchy.

We're not all a bunch of fools.