The NSA didn't oversee a $400M contract very well