In most Consulting Service Projects the Consultant has access to the Customers Data, that data will likely include Personal Identifiable Information (PI) of employees and vendors, perhaps Personal Credit Information (PCI) or perhaps Personal Health Information (PHI). The Customer is obligated to ensure that from a compliance perspective to ensure that information is adequately protected as required by regulation.  In addition if the Consultant has access to the Customer’s network they are also required to ensure that the Consultant abides by the Customer’s network security policies. t is essential that the Customer flow through these obligations to the Consultant. Conversely the Consultant has certain duties with regard to their suppliers, some license carry specific obligations that they need to ensure the Customer will abide by. Constructing appropriate flow-through obligations represents a very important part of most Consulting Service Projects.