You are an information system auditor of HDA Inc. A critical application of HDA was developed by a small vendor who has gone out of business. Additionally, you have noted that the code available under escrow is an old version. In this situation, what is your best recommendation?