Many state actors use contractors with lots of leeway; the NSA-GCHQ model of tight control is actually not the norm when it comes to APT. Just look at the Mand

Many state actors use contractors with lots of leeway; the NSA-GCHQ model of tight control is actually not the norm when it comes to APT. Just look at the Mandiant report on PLA Unit 61398.