IMHO the testing takes time and in some deals, implementation, takes more time. Imagine Gallagher Insurance Co slapping together a package without extensive testing. If many people file claims because they were hacked, Gallagher can suffer heavy losses. It makes sense that these companies are making sure SFOR's products are right for them BEFORE purchasing.