The Software Vendor CYA: Who's the Real Arse, Them or Us?