Watch this video on YouTube
What is a significant risk when outsourcing to a single, small, or newly established provider for critical software?