Contract security firms, as a generalization, do more to screw up an AO than anything the owning unit can do. Often they don't coordinate with the owning unit. They are there and paid to protect their cargo, be it materials or people. FM3-24 is not part of their contract.