The DoD is huge. It's larger than most US states. Would you exclude Cerner's healthcare records systems? Fuji? Agfa? Would you exclude the Veteran's Administration hospitals? Would you exclude the agencies responsible for safe water, forestry, and sewage treatment plants on bases? Where, exactly, would you draw that line, and how would you ensure DoD is able to replicate your logic so as to end at the conclusions you expect?