This is what everyone needs to understand when they say "we should have a public..." or "why did we privatize this".
If you have actual experience doing any work from the government you know that huge portion of it is compliance costs, realistically it absolutely is something like 40% probably.
First there is the upfront bits of doing an RFP that looks like nobody else's
then there is proving you have the required mix of ethic and gender representation (if you actually want to win)
after that comes the recording and reporting on different metrics than anyone else in industry uses because someone has to follow a rule from 1943 or some public employee who does not understand anything about the process decided they needed to CYA and wrote up some report templates, because they all believe (possibly rightly) that if they make the haystack big enough none of them can ever be identified and faulted for ordering the wrong thing or given the wrong instruction.
Next unlike the business world where the incentive is usually to accept the deliverable, if it meets the spec and functions well under test, because the customer wants to put that asset into operation and either start making or saving money money with it, the public folks are incentivized to nit pick and play lawyer about every word because again CYA, in case anything ever goes wrong in the future. So you got 15% in rework or dispute resolution right there whichever path you chose; again all the fix things any reasonable persons would find no fault with.
So the private sector responds to this in a couple ways.
First - dramatically over charge because it is government. In competitive markets there is a wink a nod and nobody offers the tax payer a far price
Second - in smaller less understood tenders they dramatically under bid to win, then insert some time and materials language somewhere that lets the go 30X over budget. The people evaluating the responses know this and don't care because it is not their money after all and the vendor will let them play victim in the court of public opinion. Oracle, SAP, Blackwater, Core-Civics types don't care what "people" think about them because they don't have "consumers", the Amazon's and Microsoft's of the world have figured out consumers are not informed enough or don't seem mind them abusing Uncle Sam or the local yokels on their county board..